S9Y Serendipity 1.5.4 – Arbitrary File Upload

• Exploit Database
• 127 阅读

• 作者： pentesters.ir
  日期： 2010-12-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15795/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

  In The Name Of GOD [+] Exploit Title:remote 0day file upload [+] Date: 2010 [+] script:Serendipity 1.5.4 [+] Software Link: http://www.s9y.org/12.html [+] Author: pentesters.ir [+]discovered by:ahmadbady [+] Contact : kivi_hacker666@yahoo.com [+] Website : WwW.PenTesters.IR [+] Greeting: Behzad, navid, ... [+]dork:"Powered by s9y"and"Powered by serendipity" ---------------------------------------------------------------------------- up: /path/htmlarea/plugins/ExtendedFileManager/manager.php   shell: /htmlarea/plugins/ExtendedFileManager/demo_images/shell.php.gif ------------------------------------------------------------------------------