phpFileManager 0.9.8 - Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'phpFileManager 0.9.8 Remote Code Execution', 'Description' = %q This module exploits a remote code execution vulnerability in...

phpFileManager cmd Parameter Command Execution

A remote command execution vulnerability exists in phpFileManager. The vulnerability is due to a design weakness when handling HTTP requests with "action" parameter set to 6 or 9. A remote user can exploit this vulnerability by injecting arbitrary command in the "cmd" parameter...

phpFileManager 0.9.8 Remote Code Execution

This module exploits a remote code execution vulnerability in phpFileManager 0.9.8 which is a filesystem management tool on a single file. Module Options msf use exploit/multi/http/phpfilemanager/rce msf undefinedrce show actions ...actions... msf undefinedrce set ACTION msf undefinedrce show...

phpFileManager 0.9.8 Remote Command Execution

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILEMANAGER0728.txt Vendor: ================================ phpfm.sourceforge.net Product: ================================ phpFileManager version 0.9.8 Vulnerability Type:...

phpFileManager 0.9.8 Cross Site Request Forgery

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILEMANAGER0729.txt Vendor: ================================ phpfm.sourceforge.net Product: ============================ phpFileManager version 0.9.8 Vulnerability Type:...

phpFileManager 0.9.8 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

phpFileManager 0.9.8 - Cross-Site Request Forgery

phpFileManager 0.9.8 - Cross-Site Request Forgery Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

phpFileManager 0.9.8 - Cross-Site Request Forgery

Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link: phpfm.sourceforge.net Version: 0.9.8 Tested on: windows 7 SP1...

phpFileManager 0.9.8 Remote Command Execution / CSRF

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILEMANAGER0728.txt Vendor: ================================ phpfm.sourceforge.net Product: ================================ phpFileManager version 0.9.8 Vulnerability Type:...

phpFileManager 0.9.8 - Remote Command Execution

phpFileManager 0.9.8 - Remote Command Execution Exploit Title: Remote Command Execution Google Dork: intitle: PHP Remote Command Execution Date: 2015-07-28 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

phpFileManager 0.9.8 - Remote Command Execution Vulnerability

PHP File Manager suffers from cross site request forgery, cross site scripting, backdoor, file check, remote shell upload, and various other vulnerabilities. Exploit Title: Remote Command Execution Google Dork: intitle: PHP Remote Command Execution Date: 2015-07-28 Exploit Author: John Page...