dokuwiki Arbitrary File Upload Vulnerabilirty

[----]

/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-
\-/ --------------------------------|----------------------------------/--------|
\-/ [+] Exploit Title : Release / dokuwiki Arbitrary File Upload Vulnerabilirty |  
\-/ [+] Date : 28 November 2011                                                 |
\-/ [+] Author : xConsoLe`                                                      |
\-/ [+] Category : WebApps                                                      |
\-/ [+] d0rk : inurl:/exe/mediamanager.php                                      |
\-/ [+] Home : N/A                                                              |
\-/ [+] Tested on : Windows Xp SP3                                              |
\-/ ------------------------|---------------------------------------------\-----|
/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-/\\-
/\\-/\\-/\\-/\\-

  (  )   /\   _                 (
    \ |  (  \ ( \.(               )                      _____
  \  \ \  `  `   ) \             (  ___                 / _   \
 (_`    \+   . x  ( .\            \/   \____-----------/ (o)   \_
- .-               \+  ;          (  O                           \____
     Dz  4            	 )        \_____________  `              \  /
(__    Ever <3       +- .( -'.- <. - _  VVVVVVV VV V\                 \/
(_____            ._._: <_ - <- _  (--  _AAAAAAA__A_/                |
  .    /./.+-  . .- /  +--  - .     \______________//_              \_______
  (__ ' /x  / x _/ (                                  \___'          \     /
 , x / ( '  . / .  /                                      |           \   /
    /  /  _/ /    +                                      /              \/
   '  (__/                                             /                  \
 
        x onsoL ` W s H r  .
     .     X   X   X X  
     .     X   X   X X  
     .     X   .   X X  
     .     X   .   X X  
     .     X   .   X X  
     .     .   .   . .  
                         
    xConsoLe` Was Here .


[+] Vulnerable Code :
 
 http://localhost/
 >
 http://localhost/lib/exe/mediamanager.php
 
 Or
 
 http://localhost/wiki/lib/exe/mediamanager.php / media.php

 Or

 http://localhost/wiki/dokuwiki/lib/exe/mediamanager.php

[+] Live Demo ;

[+] http://www.linlap.com/wiki/lib/exe/mediamanager.php
[+] http://92.103.236.188/lib/exe/mediamanager.php
[+] http://www.lapspecs.com/wiki/lib/exe/mediamanager.php
[+] www.linwik.com/wiki/lib/exe/mediamanager.php

[+] END ;D

[+] Greetz to ; J|nX , Dfpirate , XeN , Geuks , My Sweet Girl <3

[+] Cette Année Ana 3andi Lbac , ad3iili XeN xD ! 

[+] Peace * .

[----]



#  0day.today [2018-01-08]  #