PHP Support Tickets 2.2 Remote File Upload Vulnerability

2008-12-11 00:00:03

****(remote file upload)****

script: PHP_Support_Tickets_v2.2

***************************************************************************
download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHP_Support_Tickets_v2.2.zip

***************************************************************************
1:www.site.com/path/index.php?page=register

2:New Ticket

3:upload php file

shell www.site.com/path/upload/you user/phpst_ticket_number/shell.php

***************************************************


Author: ahmadbady

my mail: [email protected]

***************************************************

#

Fixes

No fixes

In order to submit a new fix you need to be registered.