Exploit Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

[Exploiter]

EDB-ID

8647

Проверка EDB

1. Пройдено

Автор

CYBER-ZONE

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-1609

Дата публикации

2009-05-08

         ***********************************************************************
         *  Battle Blog 1.25 (uploadform.asp) Remote File Upload Vulnerability *
         ***********************************************************************
         

         Found By : Cyber-Zone (ABDELKHALEK)


 
         +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
         http://localhost/blog/admin/uploadform.asp
         
         After You Upload Your File You Will See The Link To THE File Just Below
         
         
         
         some demos :+
         
         http://www.xxx.com/admin/uploadform.asp
         
         
         
         
      
         Have Nice Day                                             //Cyber-Zone
         +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-05-08]