Boomchat version 4.2 suffers from a remote shell upload vulnerability.
f8cdb399db4dbf73495db8e6482c7699973e38f755d2a7ebee3696f5e7c8db52
| # Title : boomchat-v4.2 Upload Vulnerability
| # Author : indoushka
| # email : indoushka4ever@gmail.com
| # Dork : no 4 noob
| # Tested on: Win8 fr pro
| # Bug : Upload
| # Download : www.20script.ir
=======================================
1- register in script 4 chat
2- change photo of profil
3- chang evil from 1.php to 1.php.jpg
4- go to http://127.0.0.1/bmchat/avatar/peter85467529.php