17 matches found
CVE-2019-19369
CVE-2019-19369 - FusionPBX = 4.5.10 Authentifizierte RCE Authentifizierte Angreifer können die PHP-Editor-Funktion in FusionPBX-Versionen = 4.5.10 nutzen, um eine der vorhandenen PHP-Seiten zu bearbeiten und ein PHP-Payload einzufügen. Durch das Aufrufen der geänderten Datei erhalten wir eine She...
CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...
DzSoft PHP Editor File Enumeration Vulnerability
DzSoft PHP Editor is a tool for writing and testing PHP and HTML pages. DzSoft PHP Editor has a security vulnerability.DzSoftpe is equipped with a built-in web server for previewing PHP files when combining the "HEAD" method of HTTP requests with the directory traversal "\ ... /... /..." type of...
DzSoft PHP Editor 4.2.7 - File Enumeration
DzSoft PHP Editor 4.2.7 - File Enumeration + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DZSOFT-v4.2.7-PHP-EDITOR-FILE-ENUMERATION.txt + ISR: ApparitionSec Vendor: ============== www.dzsoft.com Product:...
DzSoft PHP Editor 4.2.7 - File Enumeration Vulnerability
Exploit for windows platform in category remote exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DZSOFT-v4.2.7-PHP-EDITOR-FILE-ENUMERATION.txt + ISR: ApparitionSec Vendor: ============== www.dzsoft.com Product:...
DzSoft PHP Editor 4.2.7 - File Enumeration
Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DZSOFT-v4.2.7-PHP-EDITOR-FILE-ENUMERATION.txt + ISR: ApparitionSec Vendor: ============== www.dzsoft.com Product: ========================= DzSoft PHP Editor v4.2.7 DzSoft PHP...
Rapid PHP Editor IDE 14.1 Cross Site Request Forgery / Code Execution
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/RAPID-PHP-EDITOR-REMOTE-CMD-EXEC.txt + ISR: Apparition Security Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor...
Rapid PHP Editor IDE 14.1 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor IDE rapidphp2016.exe v14.1 Rapid PHP editor is a faster and more powerful PHP editor for Windows...
Rapid PHP Editor 14.1 - Remote Command Execution Vulnerability
Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor IDE rapidphp2016.exe v14.1 Rapid PHP editor is a faster and more powerful PHP editor for Windows...
Rapid PHP Editor 14.1 - Remote Command Execution
Rapid PHP Editor 14.1 - Remote Command Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/RAPID-PHP-EDITOR-REMOTE-CMD-EXEC.txt + ISR: Apparition Security Vendor: ====================== www.rapidphpeditor.com Produc...
Rapid PHP Editor 14.1 - Remote Command Execution
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/RAPID-PHP-EDITOR-REMOTE-CMD-EXEC.txt + ISR: Apparition Security Vendor: ====================== www.rapidphpeditor.com Product: =============================== Rapid PHP Editor...
DzSoft PHP Editor <= 3.1.2.8 - Denial of Service Exploit
No description provided by source. !/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = DzSoft PHP Server DOS Exploit; $vers = DzSoft PHP Editor 3.1.2.8; $vendor =...
SPAW PHP Editor 远程文件包含漏洞
SPAW PHP Editor是一款基于PHP的WEB应用程序。 SPAW PHP Editor不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'spawdir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 SOLMETRA SPAW PHP Editor 1.0.7 SOLMETRA SPAW PHP Editor 1.0.6 http://www.solmetra.com/en/disp.php/enproducts/enspaw/enspawabout...
DzSoft PHP Editor 3.1.2.8 - Denial of Service
!/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor 3.1.2.8"; $vendor = "http://www.dzsoft.com"; $codz ...
DzSoft PHP Editor <= 3.1.2.8 Denial of Service Exploit
No description provided by source. !/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor 3.1.2.8"; $vendo...
DzSoft PHP Editor <= 3.1.2.8 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================== DzSoft PHP Editor newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "- Connection email protected\n"; print "+ Connected\n"; print "+ Bindmode for socket..\n"; sleep1; binmode$sock;...
DzSoft PHP Editor 3.1.2.8 - Denial of Service
DzSoft PHP Editor 3.1.2.8 - Denial of Service !/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor...