Softpedia SiteXS CMS 0.1.1 Arbitrary File Upload Vulnerability

🗓️ 03 Jun 2008 00:00:00Reported by RootType

SiteXS CMS 0.1.1 has a vulnerability allowing arbitrary file uploads to the server.


                                                ###############################################################
#
#&nbsp;SiteXS&nbsp;CMS&nbsp;&nbsp;Remote&nbsp;File&nbsp;Upload&nbsp;Vulnerability
#
###############################################################
#
#&nbsp;Discovered&nbsp;by&nbsp;:&nbsp;Ciph3r
#
#
#&nbsp;E-Mail&nbsp;:&nbsp;[email protected]
#
################################################################
#
#&nbsp;
#&nbsp;CMS:&nbsp;sitexs-0.1.1&nbsp;CMS&nbsp;(&nbsp;All&nbsp;Version&nbsp;Vulnerable&nbsp;)&nbsp;
#&nbsp;&nbsp;
#&nbsp;Download&nbsp;CMS&nbsp;:&nbsp;http://dfn.dl.sourceforge.net/sourceforge/sitexs/sitexs-0.1.1.tar.gz
#
#&nbsp;Sp&nbsp;TANX4&nbsp;:&nbsp;google.com&nbsp;;&nbsp;milw0rm.com&nbsp;;&nbsp;sourceforge.net
#&nbsp;
#&nbsp;SP&nbsp;TANX2&nbsp;:&nbsp;Iranian&nbsp;hacker&nbsp;&amp;&nbsp;Kurdish&nbsp;Security&nbsp;TEAM
#&nbsp;&nbsp;
#&nbsp;You&nbsp;Must&nbsp;turn&nbsp;on&nbsp;:
#&nbsp;register_globals&nbsp;=&nbsp;On
#&nbsp;register_long_arrays=on
#&nbsp;
#
################################################################

Upload&nbsp;the&nbsp;shell&nbsp;:

&nbsp;http://localhost/[sitexs]/adm/visual/upload.php
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

you&nbsp;for&nbsp;use&nbsp;this&nbsp;exploit&nbsp;.&nbsp;you&nbsp;must&nbsp;your&nbsp;shell&nbsp;file&nbsp;exists&nbsp;in&nbsp;exploit&nbsp;directory
then&nbsp;excute&nbsp;exploit&nbsp;you&nbsp;find&nbsp;your&nbsp;shell&nbsp;in&nbsp;below&nbsp;link

&nbsp;www.example.com/[sitexs]/images/1.gif.php
&nbsp;www.example.com/[sitexs]/images/[shell][.php]

&nbsp;:d

03 Jun 2008 00:00Current

7.1High risk

Vulners AI Score7.1