PHP Director 0.21 - Remote Command Execution

PHP Director 0.21 - Remote Command Execution --+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; ex...

PHP Director 0.21 Command Execution

--+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my $host, $path, $discpath...

PHP Director Videos.PHP SQL注入漏洞

PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...