 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 448
 Members: 0
 Total: 448
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
IT Security and Insecurity Portal |
|
|
| chip |
|
| Replies: 7 |
| Views: 11222 |
|
|
 |
|
 |
|
You have access to admin panel?
Nope, but you get the same 403 Error as in the SMF forum. Any way to get around this? |
|
|
|
| chip |
|
| Replies: 7 |
| Views: 11222 |
|
|
|
|
|
|
Hmm ok.
1. You can upload any type of file you want.
2. The file goes to example.com/forums/attachments/
3. But you can't directly go to /forums/attachments/ in the url because it is forbidde ... |
|
|
|
| chip |
|
| Replies: 7 |
| Views: 11222 |
|
|
|
|
|
|
hmm, try and upload shell.php%00
otherwise, you can try overwrite the .htaccess
Thank you for your post. Here's what happened:
Uploading .htaccess didn't make any change to dir permission, I ... |
|
|
|
| chip |
|
| Replies: 7 |
| Views: 11222 |
|
|
|
|
|
|
Hey there.
I'm checking some security vulnerabilities on an SMF 1.1.4 forum, which from what I know has a few notable holes allowing RFI and SQL Injection attacks. However, these attacks require re ... |
|
|
| Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
