ZeeNetworking v1x- Arbitrary file upload Vulnerability

vendor:

v1x

by:

SONiC

7,5

CVSS

HIGH

Arbitrary File Upload Vulnerability

N/A

CWE

Product Name: v1x

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

ZeeNetworking v1x- Arbitrary file upload Vulnerability

Ready to Launch Website Package for your matrimony, matchmaking, marriage Bureau Dating Website in PHP - New Shaadi.com clone Software. The site uses PHP 4 or above for a powerful dynamic and scaleable website. A Readymade Shaadi Website with Chat, Banners, Google Adsense and more... An attacker can upload arbitrary files as images by exploiting the vulnerability in the member_photo.php file.

Mitigation:

N/A

Source

Exploit-DB raw data:

1                    ###################################               1
0                    I'm SONiC member from Inj3ct0r Team               1
1                    ###################################               0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : ZeeNetworking v1x- Arbitrary file upload Vulnerability

Date : july 23,2010

Critical Level :VERY HIGH

vendor URL :?? http://www.zeeways.com

#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x

Greetz to :www.topsecure.net, iNj3cT0r.com, www.andhrahackers.com

#######################################################################################################
Description:

Ready to Launch Website Package for your matrimony, matchmaking, marriage Bureau Dating Website in PHPÂ  - New Shaadi.com clone Software. The site uses PHP 4 or above for a powerful dynamic and scaleable website. A Readymade Shaadi Website with Chat, Banners, Google Adsense and more...

#######################################################################################################
Xploit :Arbitrary File Upload Vulnerabilty

DEMO URL? http://server/members/member_photo.php?send=pht_inserted

[..Upload Arbitrary File as Image ]



###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco