PHPUnit_eval-stdin_RCE

PHPUniteval-stdinRCE CVE-2017-9841 PHPUniteval-stdinphp Remote Code Execution A code injection vulnerability in PHPUnit, a PHP unit testing framework which part of the Mailchimp , Mailchimp E-Commerce moduels in Drupal The vulnerability within the /phpunit/src/Util/PHP/eval-stdin.php file through...

LFiFreak

LFI Freak Características Funciona con Windows, Linux y OS X Incluye bind y reverse shell tanto para Windows como para Linux Escrito en Python 2.7 ¿De qué se trata todo esto? Una herramienta única para explotar inclusiones de archivos locales usando los métodos PHP Input, PHP Filter y Data URI...

MassExploit-CVE-2024-4577

CVE-2024-4577 Escáner Masivo y Herramienta de Explotación Este script de Python automatiza la detección de servidores vulnerables a CVE-2024-4577 , una vulnerabilidad crítica en PHP-CGI que permite ejecución remota de código RCE a través de parámetros de consulta especialmente manipulados. La...

PHP_CVE-2012-1823

Vulnerabilidad de ejecución remota de código en PHP-CGI CVE-2012-1823 Principio Artículo de referencia http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Versiones afectadas php...

Php-unit-CVE-2017-9841

phpunit 远程代码执行漏洞（CVE-2017-9841） composer是php包管理工具，使用composer安装扩展包将会在当前目录创建一个vendor文件夹，并将所有文件放在其中。通常这个目录需要放在web目录外，使用户不能直接访问。 phpunit是php中的单元测试工具，其4.8.19 4.8.27和5.0.10 5.6.2版本的vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php文件有如下代码： root@kitploit: eval'?'.filegetcontents'php://input';...

CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC

CVE-2017-9841 — Prueba de Concepto PoC de Ejecución Remota de Código RCE en PHPUnit ⚠️ AVISO: Esta herramienta está destinada únicamente para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas que no poseas o para los que no tengas permiso explícito es ilegal...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Carga útil: root@kitploit: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input root@kitploit: URL de prueba: root@kitploit: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload...

Dolibarr Allows Code Injection through its Website Module

In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...

GHSA-VV7W-QF5C-734W AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php

Summary The aVideoEncoderChunk.json.php endpoint is a completely standalone PHP script with no authentication, no framework includes, and no resource limits. An unauthenticated remote attacker can send arbitrary POST data which is written to persistent temp files in /tmp/ with no size cap, no rat...

CVE-2025-49137

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of arbitrary JavaScript code. The 'saveNode' and 'saveManifest' endpoints take user input and store it in...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

CVE-2011-4750

Multiple cross-site scripting XSS vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files...

ABB Cylon Aspect 3.08.01 Remote Code Execution Vulnerability

ABB Cylon Aspect version 3.08.01 BMS/BAS controller suffers from a remote code execution vulnerability. The vulnerable uploadFile function in bigUpload.php improperly reads raw POST data using the php://input wrapper without sufficient validation. This data is passed to the fwrite function,...

PHP Input Variables Exceeded

By default, PHP accepts a maximum of 1000 variables in a request. If there are more input variables than specified, an EWARNING is issued, and further input variables are truncated from the request depending on server configuration and application code, this can have various impacts such as...

TWCMS Security Vulnerabilities

TWCMS is an enterprise website management system from China's Tong Wang CMS TWCMS company. A security vulnerability exists in TWCMS version 2.0.3, which originates from a PHP file directly echoing parameters entered from an external source, allowing remote attackers to perform cross-site scriptin...

LFiFreak - An automated LFi Exploiter with Bind/Reverse Shells

LFiFreak is a tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 Dependencies BeautifulSoup Download LFiFreak...

EUVD-2007-1446

The FDF support ext/fdf in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST...