 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 85
 Members: 0
 Total: 85
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Php code appears as html |
|
 Posted: Fri Dec 18, 2009 5:49 am |
 |
|
| Panic_Mode |
| Active user |
 |
|
| Joined: Feb 09, 2008 |
| Posts: 39 |
|
|
|
 |
|
 |
|
Hello.
I found a site where I can inject from a form html /js. I tried php code but as it seems it's not processed. It just appears as html. I know that my code is stored in a db and then fetched and executed.
Maybe I need to bypass the "echo" command...
Any help / suggestions?
Thank you. |
|
|
|
|
|
Re: Php code appears as html |
|
| Posted: Fri Mar 19, 2010 11:21 pm |
|
|
| EluneZ |
| Regular user |
 |
|
| Joined: Mar 16, 2010 |
| Posts: 14 |
| Location: Bulgaria |
|
|
|
|
|
|
| Panic_Mode wrote: | Hello.
I found a site where I can inject from a form html /js. I tried php code but as it seems it's not processed. It just appears as html. I know that my code is stored in a db and then fetched and executed.
Maybe I need to bypass the "echo" command...
Any help / suggestions?
Thank you. |
You mean vuln. at auth. html ?
Explain me more and i`ll help you! |
|
|
|
|
| Posted: Sat Mar 20, 2010 11:19 am |
|
|
| Cyko |
| Moderator |
|
|
| Joined: Jul 21, 2009 |
| Posts: 375 |
|
|
|
|
|
|
|
PHP is probably turned off
php_flag engine off
Which is why PHP gets printed, rather then parsed. |
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
