phpfastcache - phpinfo Resource Exposure

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. id: CVE-2021-37704 info: name: phpfastcache - phpinfo Resource Exposure author: whoever severity: medium description: phpinfo is susceptible to resource exposure in unprotected compos...

Imcat 4.4 - Phpinfo Configuration

Imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. id: CVE-2018-20608 info: name: Imcat 4.4 - Phpinfo Configuration author: ritikchaddha severity: high description: Imcat 4.4 allows remote attackers to read phpinfo output via the...

Symfony Profiler - Remote Access via Injected Arguments

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

WordPress EasyCart <2.0.6 - Information Disclosure

WordPress EasyCart plugin before 2.0.6 contains an information disclosure vulnerability. An attacker can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function. id: CVE-2014-4942 info: name: WordPress EasyCart 2.0.6 - Information Disclosur...

WP Query Console <= 1.0 - Remote Code Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console- from n/a through 1.0. id: CVE-2024-50498 info: name: WP Query Console = 1.0 - Remote Code Execution author: s4e-io severity: critical...

FacturaScripts - Unauthenticated phpinfo Disclosure

Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication. id: CVE-2026-42878 info: name:...

PrestaShop MyPrestaModules - PhpInfo Disclosure

PrestaShop modules by MyPrestaModules expose PHPInfo id: CVE-2023-39677 info: name: PrestaShop MyPrestaModules - PhpInfo Disclosure author: meme-lord severity: high description: | PrestaShop modules by MyPrestaModules expose PHPInfo remediation: | Apply the latest security patches and updates fro...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

LFI-Destruction

🔥 LFI-Destruction – 授权渗透测试框架 LFI-Destroyer 是一个全面的、模块化的本地文件包含（LFI）利用框架，专为授权的安全专业人员设计。它将多种攻击技术整合到一个易于使用的工具中： SSH 与浏览器制品模糊测试 – 在 Linux 和 Windows 上搜索 SSH 密钥、Putty PPK、WinSCP、FileZilla、Firefox、Chrome、Edge 和 Brave 凭据。 日志投毒 → 反弹 Shell – 通过可写日志文件自动实现 RCE，支持自定义 payload。 phpinfo 条件竞争 RCE – 当 fileuploads=On...

CVE-2023-27372-POC

CVE-2023-27372-POC 概述 这个代码是用于检测目标网站是否存在 CVE-2023-27372 漏洞的 Python POC（Proof of Concept）。 您可以通过提供单个 URL 或包含多个 URL 的文本文件来运行该代码。 影响版本：SPIP "; 功能 检查目标网站是否存在 CVE-2023-27372 漏洞。 支持单个 URL 和包含多个 URL 的文本文件。 使用方法 1. 确保已安装所需的 Python 版本。 2. 安装所需的依赖库：pip install -r requirements.txt。 3. 使用单个 URL 运行代码：python...

phpinfo-files-leaks

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esta herramienta Instala mediante pip root@kitploit: pip install phpinfo-file-leaks Ejecuta el siguiente comando para comprobar phpinfo-file-leaks -h...

CVE-2024-12542

CVE-2024-12542 linkID = 0.1.2 - Falta de autorización para la exposición no autenticada de información sensible Descripción El plugin linkID para WordPress es vulnerable al acceso no autorizado a datos debido a la falta de una comprobación de capacidades al incluir la función 'phpinfo' en todas l...

CVE-2023-49103

CVE-2023-49103 CVE-2023-49103 的 PoC 概述 该 Python 脚本旨在高效处理大量 URL，以检查是否存在 phpinfo 输出。它使用多线程并发处理大量 URL，显著加速流程。脚本还具有实时进度条，可直观跟踪进度。 要触发漏洞，仅访问 phpinfo URL 是不够的：还需要绕过 .htaccess（感谢 rapid7 的洞察）。在本例中，可通过在 URL 后添加 /.css 来实现。 要求 Python 3.x requests urllib3 colorama alive-progress concurrent.futures（Python 3...

Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report Divulgación de CVE-2025-9196 CVE-2025-9196 - Vulnerabilidad en Trinity Audio Este repositorio divulga una vulnerabilidad descubierta en Trinity Audio = 5.20.1,plugin de WordPress desarrollado por sergiotrinity. 🛠 Versión Afectada Producto : Trinity Audio Versión : v5.20.1...

CVE-2024-12535

CVE-2024-12535 Host PHP Info = 1.0.4 - Falta de autorización que permite la divulgación no autenticada de información sensible Descripción El plugin Host PHP Info para WordPress es vulnerable al acceso no autorizado a datos debido a la falta de una comprobación de capacidades al incluir la funció...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2024-12542-PoC

CVE-2024-12542-PoC 缺少授权导致未经验证的敏感信息泄露 漏洞描述 WordPress 的 linkID 插件在所有版本（包括 0.1.2 及之前版本）中，由于在包含 phpinfo 函数时缺少权限检查，导致未授权访问数据。这使得未经验证的攻击者能够读取网站服务器上的配置设置和预定义变量。该插件无需激活即可利用此漏洞。 脚本说明 1. 禁用 SSL 验证 ：禁用 SSL 警告和验证。 2. 日志记录函数 ：打印消息并将消息写入 output.txt。 3. 版本检查 ：读取 readme.txt 文件，检查版本。如果版本 = 0.1.2，则记录漏洞并获取 PHP 信息。 ...

cve-2023-2523-and-cve-2023-2648

cve-2023-2523 备注：脚本上传了phpinfo文件 使用方法： 结果自动保存到result.txt文件 图片 手工POC： root@kitploit: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: null Content-Type: multipart/form-data;...

PHPCGIScanner

PHP CGI Scanner Screenshot Overview PHP CGI Scanner is a Python 3 utility designed to help identify systems potentially exposed to CVE-2024-4577. It checks for visible PHP versions, common CGI endpoints, and phpinfo outputs to provide a quick risk assessment. Disclaimer: This tool is for authoriz...

GHSA-86VW-X4WW-X467 Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

The actionRenderCardPreview method in FieldsController passes the fieldLayoutConfig POST parameter directly to Fields::createLayout without calling Component::cleanseConfig. This allows Yii2 event handler injection via on eventName keys in the config array, leading to arbitrary code execution. Th...