Exploit PHPAdBoard - PHP uploads Arbitrary File Upload

[Exploiter]

EDB-ID

7562

Проверка EDB

1. Пройдено

Автор

AHMADBADY

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-6921

Дата публикации

2008-12-23

.......................................................................

****(remote shell upload)****

script: phpAdBoard
   
***************************************************************************
download from:http://www.w2b.ru/download/phpAdBoard.zip
   
***************************************************************************
www.site.com/path/index.php
shell: www.site.com/path/photoes/number_shell.php
-----------------------------------------------------------------------------------------
dork:"powered by phpAdBoard"

if folder photoes is forbidden
after get upload file u do right-click and see image properties and u see address file.
  
------------------------------------------------------------------------------------------  
**************************************************


Author: ahmadbady 

**************************************************

# milw0rm.com [2008-12-23]