0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
vBulletin 3.8.* - 4.* DownloadsII poison nullbyte
[================================================= vBulletin 3.8.* - 4.* DownloadsII poison nullbyte ================================================= # Exploit Title: VBulletin 4.* DownloadsII poison nullbyte # Date: 2010-04-12 # Author: Un-Dead # Team: ex.ploit ( http://ex.ploit.net ) # Software Link: http://www.vbulletin.org/forum/showthread.php?t=231427 # Version: VBulletin 4.* and VBulletin 3.8.* using DownloadsII module # Tested on: Windows XP SP3 # Usage: poison nullbyte # File upload bypass using nullbyte # Code: Upload a regular file that follows the guidelines of the uploader. Be it .rar, .pdf, etc. Once you have uploaded your file you will have the ability to upload images. Upload your file via nullbyte. Ex: exploit.php%00.jpg Once this is uploaded you will see the link to the direct file as: http://www.target-site.com/PathToVB/downloads/exploit.php_NULL.jpg However in the downloads directory itself it will have dropped the .jpg extension. So just remove “_NULL.jpg†and your good to go. Further edit: It’s noted this also works on the initial file upload, however something like exploit.php%00.rar will turn into randomnumbers-exploit.php making it hard to track down your file. # 0day.today [2024-07-05] #