Elitenetwork Advanced Social Network Script Upload Vulnerability

CVE	Category	Price	Severity
CVE-2021-40969	CWE-434	Not specified	High

Author	Risk	Exploitation Type	Date
Ketan Kulkarni	High	Remote	2017-12-30

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2017120313

Below is a copy:

Elitenetwork Advanced Social Network Script Upload Vulnerability

| # Title    : Elitenetwork Advanced Social Network Script Upload Vulnerability
| # Author   : indoushka                                                               
| # email    : [email protected]                                                                                                                                                                 
| # Dork     : Copyright  2015 Elitenetwork. All rights reserved. Powered by Elitecode.
| # Tested on: win8.1 Fr V.(Pro)  23:19 * 22/05/2015  
| # Download : http://dl.mrscript.ir/Script/94/Elitenetwork-Advanced-Social-Network-Script%5Bwww.Mrscript.IR%5D.zip
=====================================================================================================================

2 Easy :

1 -  Register a new membership 
2 -  Edit your profile & from Pictures up your Evil.php
3 -  go to http://127.0.0.1/elitenetwork/system.uploads/Evil.php

Greetz : 
jericho  http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net
---------------------------------------------------------------------------------------------------------------

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum