ProfileCMS 1.0 Remote File Upload Vulnerability Shell Upload Exploit
2007-10-29 00:00:00ProfileCMS v1.0 Shell Upload Exploit
Demo : http://slrate.com/
You can direct upload PHP shell instead of image while creating profile at this script, For example http://slrate.com/profiles here you can direct upload shell instead of images.
Dorks :
"Total Generators & Widgets"
"Powered By ProfileCMS v1.0"
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.

