Free Image & File Hosting Upload Vulnerability

[Mr.XpR]

[align=LEFT]

[php]

# Title: Free Image & File Hosting Upload Vulnerability
# EDB-ID: 12105
# CVE-ID: ()
# OSVDB-ID: ()
# Author: indoushka
# Published: 2010-04-07
# Verified: no
# Download Exploit Code
# Download N/A

view source
print?
============
| # Title : Free Image & File Hosting Upload Vulnerability
| # Author : indoushka
| # email : [email protected]
| # Home : www.iqs3cur1ty.com
| # Web Site : http://dl.p30vel.ir/scripts/vel_file_uploader_v1.1.zip
| # Dork : Copyright 2008 Free Image & File Hosting
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
| # Bug : upload
=========== Exploit By indoushka
# Exploit :

1 - http://127.0.0.1/vel_file_uploader_v1.1/index.php (Use Tamper Data)

2 - http://127.0.0.1/vel_file_uploader_v1.1/uploads/ (File Name)
[/php][/align]