Remote file upload vulnerability in PHP car dealers websit
`[~] geta php cardealers Remote File upload
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu msn: [email protected]
[~]
[~] Date: 22.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------
first register to site
login to site and edit your profile
upload your_shell.php
your_shell.php path:
localhost/script/re_images/[ID]_logo_your_shell.php
example for demo:
login: http://www.getaphpsite.com/demos/cardealers/login.php
user: zorlu
passwd: zorlu1
shell:
http://www.getaphpsite.com/demos/cardealers/re_images/1227370217_logo_c.php
[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org & darkc0de.com
[~]
[~]----------------------------------------------------------------------
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo