Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Apps :: b06-2111.htm

OzzyWork Gallery Upload Vulnerabilities



# MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities
# MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities



# Milli-Harekat Advisory ( www.milli-harekat.org )=0D 
=0D
# OzzyWork Gallery Upload Vulnerabilities=0D
=0D
# Risk : High=0D
=0D
# Class: Remote=0D
=0D
# Script : OzzyWork Gallery All Version=0D
=0D
# Credits : Dj ReMix =0D
=0D
# Thanks : =DFy Korsan , ESKOBAR , Poizonb0x , TR_IP=0D
=0D
=0D
OzzyWork Gallery pictures upload page :=0D
www.victim.com/[Ozzywork Path ]/add.asp=0D 
=0D
Vulnerable Code : onSubmit="checkFileUpload(this,'GIF,JPG,JPEG,BMP,PNG',true,'',150,100,640,480,'PIC_WIDTH','PIC_HEIGHT');return document.MM_returnValue=0D
=0D
This Code Deleted and All file Type upload...=0D


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH