getaphpsite Real Estate Remote File Upload Vulnerability

getaphpsite Real Estate Remote File Upload Vulnerability

link: http://www.milw0rm.com/exploits/7188

Discovered By: ZoRLu

first register to site

login to site and edit your profile

upload your_shell.php

your_shell.php path:

localhost/script/re_images/[ID]_logo_your_shell.php

example for demo:

login: http://www.getaphpsite.com/demos/realty/login.php

user: zorlu

passwd: zorlu1

shell:

http://www.getaphpsite.com/demos/realty/re_images/1227371905_logo_c.php