=====================================================================
.__ .__ __ .__ .___
____ ___ _________ | | ____ |__|/ |_ |__| __| _/
_/ __ \\ \/ /\____ \| | / _ \| \ __\ ______ | |/ __ |
\ ___/ > < | |_> > |_( <_> ) || | /_____/ | / /_/ |
\___ >__/\_ \| __/|____/\____/|__||__| |__\____ |
\/ \/|__| \/
Exploit-ID is the Exploit Information Disclosure
Web : exploit-id.com
e-mail : root[at]exploit-id[dot]com
#########################################
I'm Z190T, member of Exploit-Id
#########################################
======================================================================
[x] Title : "CGIToolBox Uploader <= Uploading Files Using CGI and Perl"
[x] Author : Z190T
[x] Contact : mahruz.id[at]gmail[at]com
[x] Vendor : http://blogs.sitepoint.com/uploading-files-cgi-perl/
[x] Platform : PHP and asp
[x] dork : intext:"CGIToolBox Uploader"
[x] Tested on : Windows XP sp3 Ar & Linux
**** Exploit Details ****
- http://[localhost]/up/uploader.cgi
- http://[localhost]/[path]/up/uploader.cgi
**** Attachtement ****
- Shell Example : shell.php, shell.asp, shell.html, shell.php.jpg, shell.asp.jpg, or,, [txt] extentions!!
**** Preview ****
- You can see in there!!
====================================================================== |
