Mundi Mail mypid Command Injection RCE

Exploits command injection in Mundi Mail via the mypid parameter on /admin/status/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Mundi Mail mypid command injection — execute session.""" from future import annotations import re from kittysploit import...

Mundi Mail - mypid Command Injection Detection

Detects Mundi Mail RCE via /admin/status/index.php?action=stop&mypid=;id. !/usr/bin/env python3 -- coding: utf-8 -- """Mundi Mail mypid command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mun...

Mundi Mail - mypid Command Injection RCE

Exploits Mundi Mail by injecting shell commands into the mypid parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Mundi Mail mypid command injection.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

EUVD-2009-2091

Malware in sbrugna...

Mundi Mail Multiple Remote Command Execution Vulnerabilities

Mundi Mail is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user- supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of the vulnerable system. MundiMail version 0.8.2 is vulnerable; other version...

Mundi Mail Multiple RCE Vulnerabilities

Mundi Mail is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user- supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of the vulnerable system. MundiMail version 0.8.2 is vulnerable, other version...

CVE-2009-2095

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

Directory traversal

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2095

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2095

CVE-2009-2095 is a PHP remote file inclusion vulnerability affecting Mundi Mail 0.8.2 via template/simpledefault/admin/_masterlayout.php. The root cause is register_globals being enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the top parameter. When allow_url_fo...

CVE-2009-2095: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

Mundi Mail 0.8.2 - top Remote File Inclusion

Mundi Mail 0.8.2 - top Remote File Inclusion ---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down :...

Mundi Mail 0.8.2 Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...

Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mundi Mail 0.8.2 top Remote File Inclusion Vulnerability ==========================================================...

Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down :...

Mundi Mail 0.8.2 - 'top' Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...