[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Inout Ad server Ultimate Shell upload Vulnerabilty

Author
SONiC
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13174
Category
web applications
Date add
06-07-2010
Platform
php
==================================================
Inout Ad server Ultimate Shell upload Vulnerabilty 
==================================================


Name : Inout Ad server Ultimate Shell upload Vulnerabilty
Critical Level :VERY HIGH
vendor URL :http://www.inoutscripts.com
Price:$197

Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,Bunny,Nishi,MA1201,RJ,D3aD F0x

greetz to :www.topsecure.net ,All ICW members , iNj3cT0r.com, www.andhrahackers.com

special Shoutz : my Girl Frnd [H*****]

#######################################################################################################
Description :

Inout Adserver is powerful, feature rich, fully customizable PayPerClick advertiser/publisher networking script from inoutscripts.com. Advertisers can register into adserver and can post their text or banner PayPerClick(PPC) ads. Publishers can generate html code corresponding to their preferred style and can paste it in their web site to show ads relevant to their page content. Adserver administrator can define the commission to share with publishers. Administrator can create public service ads to show them up in partner webpages irrespective of the keywords used to search or the content of the page where the ad code is placed. The entire system is template driven which allows you to easily modify the advertiser, publisher pages to match your web site look. Also the support for utf-8 encoding allows you to use any local language for your ads.


#######################################################################################################
Xploit :Shell Upload Vulnerability

DEMO URL http://www.inoutdemo.com/inout_adserver_ultimate/ppc-new-image-ad.php

Uploaded Path : http://www.inoutdemo.com/inout_adserver_ultimate/ppc-banners/

unpriviledged user could be Able to upload Shell and take over the control .

###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco
# profile http://inj3ct0r.com/author/2545




#  0day.today [2024-11-16]  #