Mundi Mail mypid Command Injection RCE

Exploits command injection in Mundi Mail via the mypid parameter on /admin/status/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Mundi Mail mypid command injection — execute session.""" from future import annotations import re from kittysploit import...

PT-2014-6274

Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote attackers to obtain configuration information by sending a request to "status/index.php" with a phpinfo action, which invokes the phpinfo function. Recommendations At...