[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Best Dating Script Arbitrary Shell Upload Vulnerability
# Published : 2009-08-18
# Author : jetli007
# Previous Title : CBAuthority - ClickBank Affiliate Management SQL Injection Vulnerability
# Next Title : Traidnt UP 2.0 Remote SQL Injection Exploit 


=======================================================
+++++++++++++++++++ |Script info| +++++++++++++++++++++
=======================================================
                       
                    [Shell Upload Vulnerability]

[-] script : bestdatingscript

[-] Site   : http://www.bestdatingscript.com



=======================================================
+++++++++++++++++++ |Author| ++++++++++++++++++++++++++
=======================================================


[+] Found by  :  jetli007

[+] C0ntact   : alkhari9007 [AT] Gmail [DOT] com 
                   
[+] Group     : Saudi Virus Team

[+] Site       : www.vxx9.cc

=======================================================
+++++++++++++++++++++++ |Exploit| +++++++++++++++++++++
=======================================================


[+] Exploit : 
     
  - steps :	 

        - [1] : register in site

        - [2] : Login with ur account 
         
        - [3] : goto http://www.127.0.0.1.com/ [path] /upload.php
		
        - [4] : http://www.127.0.0.1.com/ [path] /photos/Evil.php
		
---------------------------------------------------------------------

Greetz : Reno ; Dr.php ; !BaD BoY! ; 5D ; taishi ; ga3 wlad drb XD ; all friends [* -]

# www.Syue.com [2009-08-18]