osDate - 'uploadvideos.php' Arbitrary File Upload

====================================================

osDate Upload Shell Vulnerability (uploadvideos.php)

====================================================

##########################################################

#[~] Date : 05/08/2010                                   #

#[~] Author : Xa7m3d                                     #

#[~] Tested ON : ubuntu 9.10                             #

#[~] MY Team : Currently no                              #

#[~] Software Link : http://www.tufat.com/script39.htm   #

#[~] E-mail : [email protected]                            #

#[~] Language : php                                      #

#[~] Dork : N/A                                          #

##########################################################

[+] Step 1 : Make sure the uservideos folder exists On the next track

[-] localhost/temp/uservideos

[+] Step 2 : Register & confirm your account

[+] Step 3 : Go To :

[-] server/uploadvideos.php

[+] step 4 : upload shell.php

[+] step 5 : Go here :

[-] server/temp/uservideos

[+] You will see You shell Like "username_V1_shell.php"

 
---------greatz----------

 
Greatz to : All Muslim & Turkish Hacker,All My Friends,www.inj3ct0r.com,www.exploit-db.com,www.securityreason.com,www.securityfocus.com,www.sec-war.com,www.hackteach.org,www.sec-r1z.com,www.hackforums.net,www.1923turk.com,www.no-exploit.com,www.dev-point.com,www.2hacker.com,www.iqs3cur1ty.com,www.arab-exploit.com ..etc


Note ~ : I have The quran Memmorized! He can burn Holy Quran all he wants, the message of Islam will never die!
 
Muslim & Tunisian Hacker

 
EnJoY o_O

 
./3x17