============================================================================
| # Title : toplist v 2 Backdoor account Vulnerability |
| # Author : indoushka |
| # email : indoushka4ever@gmail.com |
| # Tested on : windows 10 FranASSais V.(Pro) |
| # Version : v 2 |
| # Vendor : http://wmscripti.com |
| # Dork : n/a |
============================================================================
poc :
Application error message :
[+] Dorking Adegn Google Or Other Search Enggine
[+] user & pass = admin
[+] panel = yonetim
http://ww1.bahisindir.net/yonetim/
[+] upload ev!l after login from : upload/yukle.php
http://127.0.0.1/tekurmv1/upload/yukle.php
Sql injection :
http://toplist.sirinshell.com/topkat.php?url=sohbet-chat <===== inject her
Remote File Upload :
[+] Some sites have deleted the upload file so use this code ( note : use after login
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================