VideoIsland - Arbitrary File Upload

EDB-ID:

10647

CVE:

EDB Verified:

Author:

RENO

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2009-12-24

Vulnerable App:

---------------------------------------
VideoIsland Remote shell upload Vulnerability
---------------------------------------

 #####################################################
 # [+] Author        :  RENO                         #
 # [+] Email         :  R7e@HoTMaiL.coM              #
 # [+] Site :  www.vxx9.cc                           #
 # [+] Team :  SauDi ViRuS TeaM                      #
 # [+] Dork : search for it :p                       #
 # [+] Script : VideoIsland                          #
 #####################################################




[+] demo : http://www.giantisland.com/VideoIsland/
[+] price : $29.00


Exploit :

how to do it :

1-Get in the site
2-go to VideoManager
3- selcet Upload
4-from the File Uploader upload your phpshell

-------------

you will find it in :

http://localhost/Path/Storage/reno.php


good luck :D

Thanks to : Allah ..


Greets : Dr.php , ! BaD BoY ! , Jetli007 , Gov.Hacker , AnTi SeCuRe , Dr.$audi , All Vxx9.Cc Members

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services