Bigace 2.7.5 Arbitrary File Upload

2011-03-31 / 2011-04-01
Credit: Net.Edit0r
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

========================================== Bigace 2.7.5 Remote Upload file Vulnerability ========================================== [~]######################################### InformatioN #############################################[~] [~] Title : Bigace 2.7.5 Remote Upload file Vulnerability [~] Author : Net.Edit0r [~] Vendor or Software Link : http://www.bigace.de/bigace-2.7.5.html [~] Email : Black.hat.tm@gmail.com [~] Data : 2011-03-29 [~] Google dork: "Powered by Bigace 2.7.5" [~] Category: [Webapps] [~] Tested on: [Linux /php] [~]######################################### ExploiT #############################################[~] [~] ExploiT : /addon/FCKeditor/editor/filemanager/connectors/uploadtest.html [~] Example : http://127.0.0.1//addon/FCKeditor/editor/filemanager/connectors/uploadtest.html [~]######################################### ThankS To ... ############################################[~] [~] Black Hat Group Member : Net.Edit0r & DarkCoder & fronk & Amir-MaGic & H3x & Milad.C0nn3ct0r #BHG [~] IRANIAN Young HackerZ # Persian Gulf [~]######################################### FinisH :D #############################################[~]################[~]


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top