ZEEJOBSITE v2.0 remote file Upload

vendor:

ZEEJOBSITE

by:

ZoRLu

8.8

CVSS

HIGH

Remote File Upload

434

CWE

Product Name: ZEEJOBSITE

Affected Version From: v2.0

Affected Version To: v2.0

Patch Exists: NO

Related CWE: N/A

CPE: a:zeejobsite:zeejobsite:2.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

ZEEJOBSITE v2.0 remote file Upload

ZEEJOBSITE v2.0 is vulnerable to a remote file upload vulnerability. An attacker can register to the site and add malicious code to the head of a shell file. The attacker can then upload the shell file as a profile photo and access the shell file by accessing the photo link.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in any file operations.

Source

Exploit-DB raw data:

ZEEJOBSITE v2.0 remote file Upload

author: ZoRLu msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

dork: "Copyright-2008@zeejobsite.com"

date: 08/11/2008 ( aha simdi gÃ¶nderiyorum saat 10:40 : ) )


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php


after jobseekers login to site ( direckt link: localhost/jobseekers/jobseekerloginpage.php )

and you edit your profile ( direckt link: http://localhost/jobseekers/editresume_next.php?rid=[id] )

add your photo ( you_shell.php upload ) after open new page you right clik your photo and select to properties 

copy photo link and paste your explorer go your shell

your_shell:

localhost/script_path/jobseekers/logos/[id].php


example for demo:

user: sabrina

passwd: testing:

login: http://zeejobsite.com/jobseekers/jobseekerloginpage.php

change profile direckt link: http://zeejobsite.com/jobseekers/editresume_next.php?rid=47

and your_shell link:

http://zeejobsite.com/jobseekers/logos/7271406.php


thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-08]