Haraj v2 Script Shell Upload Vulnerability

|----------------------------|
|        [xBADGIRL21]        |
|    [N3W PUBLIC 3XPL0IT]    |
|           _,________       |
|     0day _T _==____() --   |
|         /##(_)-'           |
|        /##/                |
|        x21                 | 
|----------------------------|
| Exploit Title : Haraj v2 Script Shell Upload Vulnerability
| Exploit Author : xBADGIRL21
| Dork : N/A in PUBLISH VER$ION
| version : 2.0
| Tested on: [ WINDOWS]
| MyBlog : http://xbadgirl21.blogspot.com/
| Date: 15/01/2017
| video Proof : https://youtu.be/LU64inIjF9M
| To buy or Danate my BTC: 1Bgqu8faM8SPrArjoWRofRaTbMdes16mRz
|--------------------
| [+] Poc :         |
|--------------------
| 1= CHOOSE A WEBSITE
| 2= GO TO ADD ADS SECTION (fill the filds)
| 3= UPLOAD YOUR FILE.PHP
| 4= SHELL PATH : http://127.0.0.1/images/SHELL.PHP
| 5= --|BUY THE FULL EXPLOIT IF U WANT EXTRA|--
| 6= ENJOY
|--------------------
| [!] Live Demo :   |
|--------------------
|1) http://www.hraj-cars.com/add_ads.php
|2) http://tiger-realestate.com
|-----------------------------------------------
| Discovered by : xBADGIRL21                   |
| Greetz : All Mauritanien Hackers - NoWhere   |
+----------------------------------------------+

#  0day.today [2018-03-13]  #