Availscript Article Script Remote File Upload Vulnerability

2008-12-14 06:00:18

[~] [~][~] ----------------------------------------------------------[~] Discovered By: S.W.A.T. [email protected][~][~] Home: www.batlagh.com[~][~] Script Page: http://www.availscript.com/article_script.php[~] -----------------------------------------------------------Xpl:1.First Register Into The Site ( link: www.site.com/[path]/signup.php )2.Login With Your Email & Password3.After That Go To "Add Pen/Author Name" ( link: www.site.com/[path]/memberarea/addpen.php )& Write Your Author & Select Your Shell.php like: c99.php4.Your Shell Will Be Appear In This Folder ( link: www.site.com/[path]/photos/ )5.Your Shell Will Be Renamed With Random Text like: cc1bd-c99.php6.Hack The Site ;)Demo:http://www.availscript.com/article_script/[~] Special Thanks To:Str0ke, All My Friends, Iranian Hackers & All Muslim#

Fixes

No fixes

In order to submit a new fix you need to be registered.