Lucene search
K

Vacation Rental Script 4.0 Shell Upload

🗓️ 20 Dec 2010 00:00:00Reported by Br0lyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

Vacation Rental Script 4.0 Shell Upload vulnerability detail

Code
`Script Name: Vacation Rental Script <= 4.0  
Site: http://www.vacationrentalscript.com/  
  
Bug: Upload Shell  
Found: Br0ly  
google dork: "2006 - 2009 Vacation Rental Script" BraZIL!!  
  
You need register a account first so:  
  
Signup: http://server/signup  
  
Cheek your email for login and password  
  
So login in:  
  
http://server/members/login  
  
After login:  
Go to:  
  
http://server/members/profile  
  
at the bottom of the page you can upload a logo why not a lithe and nice  
shell?  
  
Upload a shell type: shell.php.jpg or shell.php.jpeg  
  
after upload:  
  
http://server/public/upload/logos/youshell.php.jpg  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation