Exploit ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
27200
Проверка EDB
  1. Пройдено
Автор
ZJIEB
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2006-0702
Дата публикации
2006-02-11
Код:
source: https://www.securityfocus.com/bid/16594/info
   
ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection.
   
Successful exploitation could allow attackers to upload and possibly execute malicious files, gain access to restrict areas of the site, or inject hostile content into the site.

http://www.example.com/admin/upload.php?path=../[foldername]
Now you're ready to upload any file.
 
Источник
www.exploit-db.com

Похожие темы