# Exploit Title: dotclear-2.3.1 (Swf) File Upload Vulnerability
# Date: 01/09/2011
# Author: T0xic
# Author Mail: Malik[_]99[at]Hotmail[dot]fr
# Software: dotclear-2.3.1
# Software Link: http://dotclear.org/download/
# Go0gle Dork : 'inurl:"inc/swf/swfupload.swf"
[Comment]
#================[ Exploited By T0xic * Wahson ]===========================================
# | >> --------+++=[ Dz Offenders Cr3w ]=+++-------- << |
# | > Indoushka * KedAns-Dz * Caddy-Dz * Kalashinkov3 |
# | Jago-dz * Over-X * Kha&miX * Ev!LsCr!pT_Dz * T0xic |
# | ------------------------------------------------- < |
[POC]
http://www.example.com/path/inc/swf/swfupload.swf
you can upload files with php extension.
Example: c99.php, shell.gif.php, etc...
