Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution

Exploit Database
114 阅读

作者： AutoSec Tools

日期： 2011-05-19
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/35783/

source: https://www.securityfocus.com/bid/47918/info

Andy's PHP Knowledgebase is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input.

Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process.

Andy's PHP Knowledgebase 0.95.4 is vulnerable; other versions may also be affected.

<html>

</form>

</body>

</html>

last Exploits
Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution的更多信息

Telesquare TLR-2855KS6 – Arbitrary File Deletion：
Wchat 1.5 – SQL Injection：
Adive Framework 2.0.8 – Persistent Cross-Site Scripting：
PonVFTP – Insecure Cookie Authentication Bypass：
Schneider Electric PLC – Session Calculation Authentication Bypass：
GS Foto Uebertraeger 3.0 iOS – Local File Inclusion：
TAC Xenta 511/911 – Directory Traversal：
DT Centrepiece 4.5 – Cross-Site Scripting / Security Bypass：