DoraCMS File Upload Vulnerability
Posted on 30 November -0001
<HTML><HEAD><TITLE>DoraCMS File Upload Vulnerability</TITLE><META http-equiv="Content-Type" content="text/html; charset=utf-8"></HEAD><BODY>|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*| |=============================================================| |[+] Exploit Title: Dora CMS File Upload Vulnerability |[+] |[+] Exploit Author: Ashiyane Digital Security Team |[+] |[+] Download Link : https://github.com/doramart/DoraCMS |[+] |[+] Vendor : http://www.html-js.cn/document___Ek7skiaw |[+] |[+] Tested on: Kali Linux |[+] |[+] Date: 12 /29 / 2016 |=============================================================| |[+] Method :GET |[+] Vuln Path : http://127.0.0.1/DoraCMS-master/views/manage/addContent.ejs |[+] Vuln Path : http://127.0.0.1/DoraCMS-master/views/manage/addPlugs.ejs |[+] Vuln Path : http://127.0.0.1/DoraCMS-master/views/manage/addSliderAds.ejs |[+] Vuln Path : http://127.0.0.1/DoraCMS-master/views/manage/addSliderImgs.ejs |[+] |*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*| |[+] Discovered By : M.R.S.L.Y |*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*| </BODY></HTML>