[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Umbraco CMS 4.x Arbitrary aspx File Upload Vulnerability

[ 0Day-ID-20844 ]
Full title
Umbraco CMS 4.x Arbitrary aspx File Upload Vulnerability [ Highlight ]
Highlight - is paid service, that can help to get more visitors to your material.

Price: 10
Date add
Category
Platform
Verified
Price
 
0 BTC

 
20 USD
Risk
[
Security Risk Critical
]
Rel. releases
Description
Umbraco CMS version 4.x is vulnerable to a remote code execution vulnerability.
An attacker can upload files via an unsecured web service located at /umbraco/webservices/codeEditorSave.asmx (method SaveDLRScript).

I created this exploit because in some audits the public exploit that juan vazquez created did not work, thank Toby Clarke to discover the flaw.
This small code uploads apsx files to Umbraco CMS 4.x.
Vendor
ttp://www.umbraco.org/
Affected ver
Umbraco CMS 4.x
Tags
umbraco   aspx   upload  
Other Information
Abuses
0
Comments
0
Views
17 923
We DO NOT use Telegram or any messengers / social networks! We DO NOT use Telegram or any messengers / social networks! Please, beware of scammers!
Please login or register to buy exploit.
OR
Buy incognito
4
1
Verified by 0day Admin
Verified by 0day Admin
This material is checked by Administration and absolutely workable.
Learn more about    GOLD:
0day.today Gold is the currency of 0day.today project and is denoted on this site as such image: . It used for paying for the services, buying exploits, earning money, etc
We accept:
BitCoin (BTC)
You can pay us via BTC
LiteCoin (LTC)
You can pay us via LTC
Ethereum (ETH)
You can pay us via ETH

Author
BL
29
Exploits
1
Readers
6
[ Comments: 0 ]
Terms of use of comments:
  • Users are forbidden to exchange personal contact details
  • Haggle on other sites\projects is forbidden
  • Reselling is forbidden
Punishment: permanent block of user account with all Gold.

Login or register to leave comments