Search...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

2008-10-25T00:00:00

ID SSV:9799
Type seebug
Reporter Root
Modified 2008-10-25T00:00:00

Description

No description provided by source.

                                        
                                            
                                                //Title - NEPT Image Uploader shell upload

//Vendor - newearthpt.freehostia.com

//Version - 1.0

//Status - vendor has been notified

//Author - Dentrasi

//Description

It is possible to upload a php script to the remote site.


1. Select a php file for upload
2. Select it for upload, and tamperdata the request
3. Change the Content-Type from 'application/octet-stream' to 'image/jpeg'
4. If the link provided gives a 404, add 'upload/' before the file name

JSON Vulners Source

Initial Source

{"sourceData": "\n //Title - NEPT Image Uploader shell upload\r\n\r\n//Vendor - newearthpt.freehostia.com\r\n\r\n//Version - 1.0\r\n\r\n//Status - vendor has been notified\r\n\r\n//Author - Dentrasi\r\n\r\n//Description\r\n\r\nIt is possible to upload a php script to the remote site.\r\n\r\n\r\n1. Select a php file for upload\r\n2. Select it for upload, and tamperdata the request\r\n3. Change the Content-Type from 'application/octet-stream' to 'image/jpeg'\r\n4. If the link provided gives a 404, add 'upload/' before the file name\n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-9799", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-9799", "type": "seebug", "viewCount": 1, "references": [], "lastseen": "2017-11-19T21:23:17", "published": "2008-10-25T00:00:00", "cvelist": [], "id": "SSV:9799", "enchantments_done": [], "modified": "2008-10-25T00:00:00", "title": "NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.1, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.1}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1647600450}}