关联漏洞
标题:
Squirrelmail plugin.php PHP远程文件包含漏洞
(CVE-2006-2842)
描述:SquirrelMail是一个多功能的用PHP4实现的Webmail程序,可运行于Linux/Unix类操作系统下。 Squirrelmail 1.4.6版本的functions/plugin.php文件中存在文件包含漏洞。远程攻击者可借助插件数组参数中的URL执行任意PHP代码。 相关代码如下: if (isset($plugins) & & is_array($plugins)) { foreach ($plugins as $name) { use_plugin($name); } ... func
描述
CVE-2006-2842 is a powerful scanner for bug bounty hunters and penetration testers to discover vulnerabilities in their web applications.
介绍
<div align="center">
<img src="https://github.com/karthi-the-hacker/CVE-2006-2842/blob/main/Images/logo.png?raw=true" alt="logo">
</div>
## Badges
[](https://choosealicense.com/licenses/mit/)
[](https://twitter.com/karthithehacker)
## License
[MIT](https://choosealicense.com/licenses/mit/)
## Installation
Install cve-2006-2842 with npm
```bash
npm install cve-2006-2842 -g
```
## Usage
Example for single url
```bash
cve-2006-2842 -u http://example.com
```
## Usage
Example for list of urls
```bash
cve-2006-2842 -l urls.txt -o out.txt
```
## Screenshots

## Help menu
#### Get all items
```bash
👋 Hey karthithehacker
.-----------------------------.
| Tool : CVE-2006-2842 💉 |
| Author : @karthithehacker🎖️|
| '../../etc/passwd%00' |
'-----------------------------'
^ (\_/)
'----- (O.o)
(> <)
CVE-2006-2842 Scanner
CVE-2006-2842 is a powerful scanner for bug bounty hunters and penetration testers to discover vulnerabilities in their web applications.
$ CVE-2006-2842 [option]
Usage: CVE-2006-2842 [options]
```
| Argument | Type | Description |
| :-------- | :------- | :------------------------- |
| `-h` | `--help` | Show help |
| `-V` | `--version` | Show version number |
| `-u` | `--url` | url to scan for CVE-2006-2842 |
| `-o` | `--output` | Save the results to text file |
| `-l` | `--list` | File containing a list of URLs for CVE-2006-2842 scan. |
## 🔗 Links
[](https://karthithehacker.com/)
[](https://www.linkedin.com/in/karthikeyan--v/)
[](https://twitter.com/karthithehacker)
## Author
- [@karthithehacker](https://github.com/karthi-the-hacker/)
## Feedback
If you have any feedback, please reach out to us at contact@karthithehacker.com
文件快照
[4.0K] /data/pocs/79adf8f5b2ab906aa80de1476669d88a6387638c
├── [4.0K] Images
│ ├── [ 88K] examples.png
│ └── [ 36K] logo.png
├── [4.0K] includes
│ └── [1.3K] scan.js
├── [1.5K] index.js
├── [1.0K] LICENSE
├── [1.3K] package.json
├── [2.4K] README.md
└── [4.0K] utils
├── [ 592] filereader.js
└── [2.5K] help.js
3 directories, 9 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。