CVE-2011-5083

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory...

Dotclear 2.3.1 Shell Upload

Exploit Title: dotclear-2.3.1 Swf File Upload Vulnerability Date: 01/09/2011 Author: T0xic Author Mail: Malik99atHotmaildotfr Software: dotclear-2.3.1 Software Link: http://dotclear.org/download/ Go0gle Dork : 'inurl:"inc/swf/swfupload.swf" Comment ================ Exploited By T0xic Wahson...