Barclaycart - Unauthenticated Shell Upload

The Barclaycart WordPress plugin was found to be vulnerable to an Unauthenticated Shell Upload security vulnerability, due to using a vulnerable version of the third-party uploadify dependency. This issue has been seen exploited in the wild. "@$uploadfile",...

大汉xxgk（政府信息公开）系统某处越权+getshell

简要描述： 政府信息公开系统的getshell。和前两天发的那个拿shell方式是不一样的。 详细说明： 越权发生在setup/oprsetting.jsp 拿shell是在上传license文件的jsp中setup/oprlicenceinfo.jsp 漏洞证明： 此时已经将setup的登录密码清空。（有风险，请勿随意尝试，不要跟着我犯错……） 提交数据的时候清空密码即可登录成功 img src="https://images.seebug.org/upload/201403/032350491567f745ccbf670be2346bb5147a9878.png"...

WordPress TheCotton Shell Upload

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

TYPO3 6.1.7 XSS / Disclosure / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in Typo3 CMS Version .| introductionpackage-6.1.7 Date ....| 24.02.2014 Found ...| HauntIT Blog Home ....| www.typo3.org ============================================================== From admin use...

TYPO3 6.1.7 XSS / Disclosure / Shell Upload

TYPO3 version 6.1.7 suffers from cross site scripting, information disclosure, and remote shell upload vulnerabilities. ============================================================== Title ...| Multiple vulnerabilities in Typo3 CMS Version .| introductionpackage-6.1.7 Date ....| 24.02.2014 Found...

Zen Cart E-Commerce 1.5.1 XSS / Open Redirect / Shell Upload

Zen Cart E-Commerce version 1.5.1 suffers from cross site scripting, open redirection, and remote shell upload vulnerabilities. ============================================================== Title ...| Multiple vulnerabilities in Zen Cart e-commerce Version .| zen-cart-v1.5.1-full-fileset-0918201...

Zen Cart E-Commerce 1.5.1 XSS / Open Redirect / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in Zen Cart e-commerce Version .| zen-cart-v1.5.1-full-fileset-09182012 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + For...

ILIAS 4.4.1 Cross Site Scripting / Shell Upload Vulnerabilities

ILIAS version 4.4.1 suffers from cross site scripting and remote shell upload vulnerabilities. ============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias....

ILIAS 4.4.1 Cross Site Scripting / Shell Upload

============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de ============================================================== First from admin user logged...

gpEasy 4.3.x XSS / File Inclusion / Shell Upload

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

WordPress Kidoo Shell Upload

"@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1; $postResult = curlexec$ch; curlclose$ch; print "$postResult"; ?...

Amin'z Tech CMS Shell Upload / SQL Injection

---------------------------------------------- Exploit Title : Amin'z Tech Login Page SQL Injection Bypass / Upload shell vulnerability Exploit Author : ACC3SS Vendor Homepage : http://www.aminztech.com Google Dork : intext:"AMIN'Z TECH" inurl:panel Date: 2014-01-16 Tested on: Windows 7...

WordPress Amerisale-Re Remote Shell Upload

Exploit Title : Wordpress amerisale-re Remote Shell Upload Exploit Author : T3rm!nat0r5 Vendor Homepage : http://wordpress.org/ Google Dork : inurl:/wp-content/plugins/amerisale-re Date : 2014/01/30 Tested on : Windows 8 , Linux This module requires Metasploit: http//metasploit.com/download Curre...

Imageview 6.x Shell Upload

Author: TUNISIAN CYBER + Exploit Title: Imageview File Upload vulnerability + Date: 20-01-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Friendly Sites: na3il.com,th3-creative.com +Exploit: Imageview Suffers from a File Upload Vulnerability which allows the attacker to upload a...

Joomla Aclsfgpl Shell Upload

Author: TUNISIAN CYBER + Exploit Title: Joomla Component comaclsfgpl File Upload Vulnerability + Date: 07-01-2014 + Category: WebApp + Google Dork: :inurl:"index.php?option=comaclsfgpl" addform + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: You can upload file .php/.php.jpg...

Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability

start "backgroundexec" cbcs.exe listen -cp:faggot -bp:hacker | echo "" shell.php Usage Info Edit the code and run ! import urllib import urllib2 Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability Work only on windows box def requesturl, params=None, method='GET': if method ==...

PHPSurveyor Shell Upload

-= G4eL =- Exploit Title: PHPSurveyor - Shell Upload Exploit Author: G4eL Date: 26/12/2013 Product: PHPSurveyor Official Site: http://www.limesurvey.org/ Risk Level: High /admin/templates.php - File Upload URL SITE = Default directory of PHPSurveyor Example : http://site.com/survey/ File Uploaded...

Telmanik CMS 1.01 Shell Upload

/ Exploit title : telmanik cms v1.01 File Upload Date : 12/12/2013 Author : JoKeRStEx Software Link : http://www.telmanik.com/open-source.php Tested On : WinXP PRO SP3 CVE : Version : 1.01 / 1 File Upload P.O.C "@".$shell; curlsetopt$dz,CURLOPTPOSTFIELDS,$jxarray; $exec=curlexec$dz;...

Phone Drive Eightythree 4.1.1 XSS / Command Injection / Shell Upload

Document Title: =============== Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1168 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID: ==================================...

Photo Video Album Transfer 1.0 Local File Inclusion / Shell Upload

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...