Zubrag.com File Upload Form Shell Upload

Exploit Title: File Upload Form File Arbitrary Upload Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: File Upload Form http://www.zubrag.com/scripts/file-upload-form.php Tested on: Linux Comment Greetz: Hern...

zubrag-upload.txt

//Title - Zubrag Uploader 1.0 Arbitrary Shell Upload Vulnerability //Vendor - zubrag.com/scripts/file-upload-form.php //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. The script attempts to hide the...