[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Sports Clubs Web Panel 0.0.1 Remote File Upload Vulnerability
# Published : 2008-09-12
# Author : Stack
# Previous Title : Free PHP VX Guestbook 1.06 Arbitrary Database Backup Vulnerability
# Next Title : PhpWebGallery 1.3.4 Remote Blind SQL Injection Exploit
--==+============================================================================+==--
--==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==--
--==+============================================================================+==--
[*] Discovered By: Stack
[+] Discovered On: 11 Sep 2008
[+] Download: http://sourceforge.net/project/downloading.php?group_id=188949&use_mirror=ovh&filename=sportspanel-0.0.1a.tar.gz&50146370
hello guys in this script admin need make a directory name grounds in public directory of script for the 'Add Ground' functions work
so then its will be useful for us use this exploit :d
Exploit :
http://localhost/sport/?p=grounds-add
after write any nae in Ground Name select
upload you php script and go to
http://localhost/sport/grounds/
you can see your php file uploaded
# www.Syue.com [2008-09-12]