Sisfokol 4.0 – Arbitrary File Upload

• Exploit Database
• 122 阅读

• 作者： cr4wl3r
  日期： 2012-10-17
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/22038/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

  Undergroundthalo Hacking Team - Security Advisory   Release Date.13-Okt-2012 Last Update. - Vendor Notification Date.14-Okt-2012 Product. Sisfokol 4.0 Download. http://sisfokol.bitnet.web.id/ Platform.PHP Affected versions. 4.0 possibly others Solution Status. No response from the vendor Severity Rating. High Impact.Exposure of sensitive information Exposure of system information System Access Attack Vector. Remote without authentication CVE reference. CVE - not yet assigned   Details The web application is vulnerable to multiple security vulnerabilities, such as Unauthenticated File Upload   Remote Bypass Authentication All form in direktori [Sisfokol]/janissari/k/ does not require authentication to upload a file. By issuing a POST request with a webshell embedded in a JPEG image it is possible to upload [Sisfokol]/filebox/   Direktori Affected Sisfokol/janissari/k/profil/profil.php Sisfokol/janissari/k/album/album_detail.php Sisfokol/janissari/k/artikel/artikel_post_filebox.php Sisfokol/janissari/k/buletin/buletin_post_filebox.php Sisfokol/janissari/k/jurnal/jurnal_post_filebox.php   Discovered by. Ramdan Yantu aka cr4wl3r from Undergroundthalo Hacking Team   Undergroundthalo Hacking Team Site: http://0xuht.org Twitter: @hackb0x