Odlican CMS version 1.5 suffers from an arbitrary remote file upload vulnerability.
8bffc96ee8c1fd6a86c0b27de927dd50dbac4c925840abff254934b88a934fd0
#odlican.net cms v.1.5 remote file upload vulnerability
#Author: REMOVED AT REQUEST OF AUTHOR
#you can download following cms here
#http://cms.odlican.net/files/cmsv1-5.zip
#Info:odlican.net cms v.1.5 is simple opensource cms made by croatian web designers
and it has serious flaw.
#dork:Powered by odlican.net cms v.1.5
#what is vulnerable?
this is vulnerable part of code from upload.php and it will upload any file to /cms/files/ folder(including dangerous php scripts)
if ( isset($_POST['pokreni'])){
$target_path = "files/";
$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {echo "Datoteka ". basename( $_FILES['uploadedfile']['name']). " je snimljena na server";} else{ echo "Do�lo je do gre�ke poku�ajte ponovno!";}
}
#there should be code that will filter some extensions like .php etc.....
#fixajte si taj kod. dodajte da skripta provjerava ekstenzije i velicinu filea
#pozz