Lucene search
K

Job Script 2.0 Shell Upload

🗓️ 21 May 2009 00:00:00Reported by HakxerType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

Job Script 2.0 Shell Upload vulnerability in Job Board, allows arbitrary file upload. Steps to upload shell file and view it

Code
` ___ ___ __   
/ | \_____ | | _____ ___ ___________  
/ ~ \__ \ | |/ /\ \/ // __ \_ __ \  
\ Y // __ \| < > <\ ___/| | \/  
\___|_ /(____ /__|_ \/__/\_ \\___ >__|   
\/ \/ \/ \/ \/ :: Egy Coders Team Researcher  
/- Job Board => Arbitrary File Upload Vulnerability  
/- demo : http://www.jobscriptdemo.com  
/- Greetz : ExH , ProViDoR , Bright D@rk , Error Code , all team  
/- Proud To Be Egyptian .....  
/- http://hakxer.blogspot.com/  
  
* Hi every body  
* in this vulnerability you can upload any file you want .php .. etc  
* the script is job board from job script company we can upload shell into  
* board ok now look at steps  
  
* first goto http://host/path/register.php  
* and now sign in board  
* goto add CV Page here http://host/path/mycv.php  
* then go and upload shell file  
* click Upload CV  
* now go to - Click Here to view your CV -  
* like this http://host/path/accesscv.php?id=[randid]  
* shell uploaded successfully  
  
* you can test this vulnerability in demo user  
* email : demo  
* pass : demo  
  
*** notes :  
** use it in your own risk  
  
./be safe  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation