Seditio CMS <= v121 (pfs.php) Remote File Upload Vulnerability

🗓️ 28 Jul 2007 00:00:00Reported by RootType

Seditio CMS v121 Remote File Upload Vulnerabilit


                                                #&nbsp;Seditio&nbsp;CMS&nbsp;Remote&nbsp;File&nbsp;Upload&nbsp;Vulnerability

#&nbsp;ReSearcher&nbsp;:&nbsp;A.D.T

#&nbsp;Script&nbsp;:&nbsp;Seditio&nbsp;and&nbsp;Ldu&nbsp;Cms

#&nbsp;Version&nbsp;:&nbsp;All&nbsp;Versions

#&nbsp;Script&nbsp;HomePage&nbsp;:&nbsp;http://neocrome.net/

#&nbsp;Dork&nbsp;:&nbsp;&quot;powered&nbsp;by&nbsp;seditio&quot;&nbsp;or&nbsp;&quot;powered&nbsp;by&nbsp;ldu&quot;

#&nbsp;Risk&nbsp;:&nbsp;Very&nbsp;High!

#&nbsp;Usage&nbsp;:&nbsp;Firstly,&nbsp;you&nbsp;register&nbsp;the&nbsp;victim&nbsp;web&nbsp;site.&nbsp;After,&nbsp;go&nbsp;to&nbsp;&quot;pfs.php&quot;&nbsp;and&nbsp;upload&nbsp;your&nbsp;evil&nbsp;script!

#&nbsp;[+]&nbsp;Your&nbsp;Evil&nbsp;Script&nbsp;:&nbsp;evilscriptname.php.gif&nbsp;or&nbsp;evilscriptname.php.jpg&nbsp;or&nbsp;evilscriptname.php.png

#&nbsp;Contact&nbsp;:&nbsp;[email protected]

#&nbsp;HomePage&nbsp;:&nbsp;http://err0rgroup.org/&nbsp;&nbsp;&nbsp;&nbsp;

#&nbsp;We&nbsp;Are&nbsp;:&nbsp;A.D.T&nbsp;|&nbsp;LaqN&amp;#65533;S&nbsp;|&nbsp;KeyStr0ke&nbsp;|Pcq0&nbsp;|&nbsp;D&amp;#65533;menci&nbsp;|&nbsp;SaLuR&nbsp;|&nbsp;Z@rih&nbsp;|&nbsp;0ssi3&nbsp;|&nbsp;Sanal-Tehlike&nbsp;|&nbsp;Lnt

#&nbsp;...and&nbsp;thanks&nbsp;str0ke

28 Jul 2007 00:00Current

7.1High risk

Vulners AI Score7.1

Seditio CMS &lt;= v121 (pfs.php) Remote File Upload Vulnerability

Seditio CMS <= v121 (pfs.php) Remote File Upload Vulnerability