Inout Music version 1.0 Shell upload Vulnerabilty

vendor:

Inout Music

by:

..::[ SONiC ]::.. aka ~the_pshyco~

7,5

CVSS

HIGH

Shell upload Vulnerability

N/A

CWE

Product Name: Inout Music

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Inout Music version 1.0 Shell upload Vulnerabilty

Inout Music is the most powerful, affordable, flexible, feature rich, customizable music portal script for your website. Users can purchase their favorite music from the buyer and download it instantaneously. A vulnerability exists in the Inout Music version 1.0 which allows an attacker to upload a malicious shell on the vulnerable website.

Mitigation:

The vendor has released a patch to address this vulnerability. It is recommended to update the Inout Music version to the latest version.

Source

Exploit-DB raw data:

==============================================================
Inout Music  version 1.0  Shell upload Vulnerabilty 
==============================================================


Name : Inout Music  version 1.0  Shell upload Vulnerabilty 
Date : july 9,2010
Critical Level     :VERY HIGH
vendor URL :http://www.inoutscripts.com
Price:$197

Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,Bunny,Nishi,MA1201,RJ,D3aD F0x

greetz to :www.topsecure.net ,All ICW members , iNj3cT0r.com, www.andhrahackers.com

special Shoutz : my Girl Frnd [H*****] 
###################################
I'm SONiC member from Inj3ct0r Team
################################### 

Description :

Inout Music is the most powerful, affordable, flexible, feature rich, customizable music portal script for your website. Users can purchase their favorite music from the buyer and download it instantaneously 


#######################################################################################################
Xploit :Shell Upload Vulnerability

DEMO URL http://www.site.com/inout_music_ultimate/audio/addtrack



###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco