EDB-2441
functionalBlog Pixel Motion 2.1.1 - PHP Code Execution / Create Admin
view exploit source exploit_dbverifiedtype webappsauthor DarkFigpublished 2006-09-27catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2006-5085US | high7.5 | Exploit | ||
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected int… | ||||
| CVE-2006-5086US | medium6.4 | Exploit | ||
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan