Halaman

Exploit JustBoil TinyMCE Images Upload Unrestricted #issue

Sabtu, 31 Oktober 2015

#-Title: Exploit JustBoil TinyMCE Images Upload Unrestricted #issue
#-Author: Goginho
#-Date: 10/31/2015
#- Vendor : justboil
#- Link Download : github. com/vikdiesel/justboil. me
#- Tested on : Trusty Tahr / ubuntu
#- Fixed in ??
==========================================================================

Proof Of Concept :

[#] Google Dork: 
intext:"{#jbimages_dlg.select_an_image}"
inurl:"/plugins/jbimages/"

[#] Vulnerability / Exploit : "/public/js/tiny_mce/plugins/jbimages/dialog.htm"

[#] When Vulnerable :



This is just issue, problably u can exploited this plugin.

Shell Acces ? hmm .. 

Tidak ada komentar:

Posting Komentar