发布 2017-10-30 漏洞条目

Ingenious 2.3.0 – Arbitrary File Upload

Exploit Source

# # # # #

# Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload

# Dork: N/A

# Date: 30.10.2017

# Vendor Homepage: http://iloveprograming.com/

# Software Link: https://www.codester.com/items/4945/ingenious-school-management-system

# Demo: http://iloveprograming.com/view/login.php

# Version: N/A

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: CVE-2017-15957

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Social: @ihsansencan

# # # # #

# Description:

# The vulnerability allows an student,teacher upload arbitrary file....

# Proof of Concept:

# http://localhost/[PATH]/my_profile.php

# http://localhost/[PATH]/view/teacher_profile2.php

# http://localhost/[PATH]/uploads/[FILE]

# Etc..

# # # # #

相关漏洞条目