Tavanmand Portal (fckeditor) Remote Arbitrary File Upload Vulnerability

Securitylab.ir Application Info: Name: Tavanmand Portal version: 1.1 Vendor: http://www.tavanmand.ir Vulnerability: http://site.ir/fckeditor/editor/filemanager/upload/test.html Uploaded file here http://site.ir/UserFiles/FILE.ASPX Discoverd By: Pouya Daneshmand Website: http://securitylab.ir...

Tavanmand Portal 1.1 Shell Upload

Securitylab.ir Application Info: Name: Tavanmand Portal version: 1.1 Vendor: http://www.tavanmand.ir Vulnerability: http://site.ir/fckeditor/editor/filemanager/upload/test.html Uploaded file here http://site.ir/UserFiles/FILE.ASPX Discoverd By: Pouya Daneshmand Website: http://securitylab.ir...