PHP Director 0.21 - Remote Command Execution

--+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my $host, $path, $discpath...

PHP Director <= 0.21 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ===================================================== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my...

PHP Director 0.21 - Remote Command Execution

PHP Director 0.21 - Remote Command Execution --+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; ex...

PHP Director Videos.PHP SQL注入漏洞

PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...

CVE-2007-3562: Undefined Security Weakness

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...