135 matches found
fuzzylime (cms) comssrss.php files[] Parameter Traversal Local File Inclusion
The remote host is running fuzzylime cms, a PHP-based content management system. The version of fuzzylime cms installed on the remote host fails to sanitize user-supplied input to the 'files' parameter of the 'commsrss.php' script before using it to include PHP code. Regardless of PHP's...
Fuzzylime 3.01 Remote Code Execution Exploit
Good morning, Name: Fuzzylime 3.01 Remote Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Conditions: None http://realn.free.fr/releases/89731 RCE with "no conditions" ... Peace, real...
fuzzylime301-execphpcomm.txt
Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...
fuzzylime301-execphp.txt
!/usr/bin/php ' ; $shell = new phpreter$url.'code/polls/titles.inc.php', '-:-:-.-:-:-', 'cmd', array, false; function get$url $infos = parseurl$url; $host = $infos'host'; $port = isset$infos'port' ? $infos'port' : 80; $fp = fsockopen$host, $port, &$errno, &$errstr, 30; $req = "GET $url...
fuzzylime301-execperl.txt
!/usr/bin/perl !!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!! after i noticed that there was a problem changing $cmd,i fixed it.this is the result. Fuzzylime 3.01 Remote Code Execution Credits: real and inphex C:\ perl ye.pl host /path/ :id uid=63676dswrealty...
Directory traversal
Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...
Directory traversal
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3165
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3164
Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...
CVE-2008-3164
Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...
CVE-2008-3165
CVE-2008-3165 affects fuzzylime (CMS) versions 3.01a and earlier. The vulnerability is a directory traversal flaw in rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. sequence in the p parameter, demonstrated via content.php; this is a different v...
CVE-2008-3165
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3164
CVE-2008-3164 affects fuzzylime (cms) 3.01 (and 3.01a) with a directory traversal condition in blog.php. When magic_quotes_gpc is disabled, an attacker can supply a .. in the file parameter to cause the application to include and execute arbitrary local files. The vulnerability impact is remote c...
fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
No description provided by source. ?php Name: Fuzzylime 3.01 Remote Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but...
fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (php)
No description provided by source. !/usr/bin/php ?php Fuzzylime 3.01 Remote Code Execution Credits: Inphex and real C:\ php fuzzylime.php http://www.target.com/fuzzylime/ targetcmd id uid=63676dswrealty gid=888vusers groups=33www-data $url = $argv1;...
Fuzzylime CMS 3.01 - commrss.php Remote Code Execution
Fuzzylime CMS 3.01 - commrss.php Remote Code Execution Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.ph...
fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (pl)
No description provided by source. !/usr/bin/perl newst version Fuzzylime 3.01 Remote Code Execution Credits: real and inphex C:\ perl ye.pl host /path/ :id uid=63676dswrealty gid=888vusers groups=33www-data use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch...
fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== fuzzylime cms 3.01 commrss.php Remote Code Execution Exploit ============================================================== Conditions: None Greetz: Inphex, hEEGy and austeN...
Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution
Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...
Fuzzylime CMS 3.01 - poll Remote Code Execution (PHP)
Fuzzylime CMS 3.01 - poll Remote Code Execution PHP !/usr/bin/php ' ; $shell = new phpreter$url.'code/polls/titles.inc.php', '-:-:-.-:-:-', 'cmd', array, false; function get$url $infos = parseurl$url; $host = $infos'host'; $port = isset$infos'port' ? $infos'port' : 80; $fp = fsockopen$host, $port...