PHPDirector Game Edition 0.1 - Local File Inclusion / SQL Injection / Cross-Site Scripting

Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer 2.0i / LinuxBox Ubuntu Server 9.10 CVE : Code : Local File Inclusion ! Header.php Vuln...

PHP Director <= 0.21 Remote Command Execution Exploit

No description provided by source. --+++===================================================================+++-- --+++====== PHP Director = 0.21 Remote Command Execution Exploit ======+++-- --+++===================================================================+++-- !/usr/bin/perl use strict; us...

Design/Logic Flaw

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

Design/Logic Flaw

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3530

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3529

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

CVE-2007-3529

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

CVE-2007-3530

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3529

CVE-2007-3529 affects videos.php in PHPDirector 0.21 and earlier. The vulnerability allows remote attackers to obtain sensitive information by sending an empty value for the id[] parameter, which triggers an error message that reveals the path. Affected software is PHPDirector (videos.php) with v...

CVE-2007-3530

CVE-2007-3530 affects PHPDirector 0.21 and earlier. The admin account name and password are stored in config.php, which allows local users to gain privileges by reading that file. The vulnerability is a local privilege escalation due to insecure storage of credentials. The available sources confi...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

CVE-2007-3529: Undefined Security Weakness

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

CVE-2007-3530: Undefined Security Weakness

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities

PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET DESCRIPTION: - SQL injection ...

phpdirector-sql.txt

PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPDirector = 0.21 videos.php id Remote SQL Injection Vulnerability ====================================================================== PHPDirector = 0.21 SQL...

PHPDirector 0.21 - videos.php?id SQL Injection

PHPDirector 0.21 - videos.php?id SQL Injection PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 200...

PHPDirector 0.21 - 'videos.php?id' SQL Injection

PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 2007-07-02...