Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- kay the vulnerability which i will talk about is tiny_mce Vulnerability. It's most common and privately exist vulnerability in most china and vietnam domains.
- The Dork : /core_main/editor/editor/filemanager/connectors/uploadtest.html
- After open a victim's site. Select "PHP" in File Uploader type
- In UPLOAD FILE .. Upload your shell (gif,phtml, or php) Or HTML deface page.
- To see your file : http://site.com/web1/file_editor/"Your file" *_*
- Different exploits
- 1 FCKeditor 2010年
- 2 eWebEditor 2010年
- 3 Cute Editor 2010年
- 4 Webhtmleditor 2010年
- 5 Kindeditor 2010年
- 6 Freetextbox 2010年
- 7 Msn editor 2010年
- http://paste.c99.nl/5ff4aca41f1a8a02216b.html
Advertisement
Add Comment
Please, Sign In to add comment