 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 161
 Members: 0
 Total: 161
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Uploading a shell on vbulletin 3.8.3? |
|
 Posted: Thu Dec 03, 2009 1:07 am |
 |
|
| ThinSmoke |
| Advanced user |
 |
|
| Joined: Nov 15, 2008 |
| Posts: 55 |
|
|
|
 |
|
 |
|
Heya,
well i got access to this forum which is running vbulletin 3.8.3, i managed to get one of the admins password, now my problem is that i cant seem to get a shell on the server 
Couldnt really think of many ways, what i did so far is
I added attachement type .php , added the mimetype , didnt work
so i changed the folder to a folder i can reach from outside, for some reason i cant open the file tho, i can access the avatars in the same folder tho..
Well if you got any idea, please let me know, its very important for me to get root access.
 |
|
|
|
|
| Posted: Thu Dec 03, 2009 2:51 am |
|
|
| ThinSmoke |
| Advanced user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 55 |
|
|
|
|
|
|
|
found a way trough the vBa CMPS  |
|
|
|
|
| Posted: Mon Dec 07, 2009 9:47 pm |
|
|
| saiflol |
| Beginner |
|
|
| Joined: Dec 07, 2009 |
| Posts: 2 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Tue Dec 08, 2009 2:01 am |
|
|
| ThinSmoke |
| Advanced user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 55 |
|
|
|
|
|
|
|
| See the picture and you should notice with that admin account i had no access to the plugins feature.. |
|
|
|
|
| Posted: Wed Dec 16, 2009 2:19 am |
|
|
| munglor |
| Regular user |
|
|
| Joined: Nov 13, 2009 |
| Posts: 20 |
|
|
|
|
|
|
|
| ThinSmoke wrote: | | See the picture and you should notice with that admin account i had no access to the plugins feature.. |
Currently in an identical situation on one of my boards. What'd you do through the vBa CMPS? |
|
|
|
|
| Posted: Thu Dec 17, 2009 3:19 pm |
|
|
| ThinSmoke |
| Advanced user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 55 |
|
|
|
|
|
|
|
Export a plugin of the vBa CMPS and take a look at it  |
|
|
|
|
www.waraxe.us Forum Index -> vBulletin Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
