Jbimages TinyMCE Combine 3.04 Vulnerability

2018.06.08
id Sn00py (ID) id
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: "intext:Powered By combine.or.id site:"

[+]Exploit Title: Jbimages TinyMCE Combine 3.04 Vulnerability [+]Author: ./Sn00py [+]Team: N45HT [+]Goolge Dork: "index of jbimages/ site:" "intext:Powered By combine.or.id site:" [+]Tested on: Windows 10 pro [+]Vendor: http://combine.or.id/ ======================================= [+]Proof Of Concept: Dorking in google [+]Exploit: http://127.0.0.1/assets/tiny_mce/plugins/jbimages/dialog-v4.htm [+]Vuln? You can upload image :) [+]You can see the upload http://127.0.0.1/assets/images/Your_image.jpg [+]Demo? http://desapesidi.magelangkab.go.id/assets/tiny_mce/plugins/jbimages/dialog-v4.htm http://desasalamgrabag.magelangkab.go.id/assets/tiny_mce/plugins/jbimages/dialog-v4.htm http://desabanyusidi.magelangkab.go.id/assets/tiny_mce/plugins/jbimages/dialog-v4.htm http://desabanyuroto.magelangkab.go.id/banyuroto/assets/tiny_mce/plugins/jbimages/dialog-v4.htm Greetz:Shinchan - ZEROONE-04 - ZakirDotID - RSFLT - N45HT - AllindonesiaDefacer


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top