PHPDirector Game Edition SQL Injection

Exploit Title: PHPDirector Game Edition SQL Injection Vulnerability games.php Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Software Link: http://www.play-online.bzh.be/forum/download/phpdirectorgameedition.zip Version: v0.1 Tested on: Windows XP sp2 WampServer...

PHP Director <= 0.21 Remote Command Execution Exploit

No description provided by source. --+++===================================================================+++-- --+++====== PHP Director = 0.21 Remote Command Execution Exploit ======+++-- --+++===================================================================+++-- !/usr/bin/perl use strict; us...

Design/Logic Flaw

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

Design/Logic Flaw

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3529

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

CVE-2007-3530

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3529

CVE-2007-3529 affects videos.php in PHPDirector 0.21 and earlier. The vulnerability allows remote attackers to obtain sensitive information by sending an empty value for the id[] parameter, which triggers an error message that reveals the path. Affected software is PHPDirector (videos.php) with v...

CVE-2007-3530

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

CVE-2007-3530

CVE-2007-3530 affects PHPDirector 0.21 and earlier. The admin account name and password are stored in config.php, which allows local users to gain privileges by reading that file. The vulnerability is a local privilege escalation due to insecure storage of credentials. The available sources confi...

CVE-2007-3529

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...

PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities

PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET DESCRIPTION: - SQL injection ...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

PHPDirector 0.21 - 'videos.php?id' SQL Injection

PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 2007-07-02...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPDirector = 0.21 videos.php id Remote SQL Injection Vulnerability ====================================================================== PHPDirector = 0.21 SQL...

phpdirector-sql.txt

PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net...

PHPDirector 0.21 - videos.php?id SQL Injection

PHPDirector 0.21 - videos.php?id SQL Injection PHPDirector ',3,4,5,6,7,8,9,10,11,12,13,14,15%20INTO%20OUTFILE%20'pathfounded/shell.php'%20FROM%20ppconfig 3. http://www.site.com/shell.php?cmd=uname -a GREETZ: all memberz of RST and milw0rm //kw3rln http://rstzone.net milw0rm.com 200...