exploit-db-mirror/exploits/php/webapps/15793.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

30 lines
No EOL
611 B
Text

Script Name: Vacation Rental Script <= 4.0
Site: http://www.vacationrentalscript.com/
Bug: Upload Shell
Found: Br0ly
google dork: "2006 - 2009 Vacation Rental Script" BraZIL!!
You need register a account first so:
Signup: http://server/signup
Cheek your email for login and password
So login in:
http://server/members/login
After login:
Go to:
http://server/members/profile
at the bottom of the page you can upload a logo why not a lithe and nice
shell?
Upload a shell type: shell.php.jpg or shell.php.jpeg
after upload:
http://server/public/upload/logos/youshell.php.jpg