CVE-2008-6785
published 2009-05-01CVE-2008-6785: Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable…
PriorityP345medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
3.13%
86.2th percentile
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| galaxyscripts | mini_file_host | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Mini File Host 1.5 - Arbitrary File Upload
exploitdb·2009-12-22
CVE-2008-6785 Mini File Host 1.5 - Arbitrary File Upload
Mini File Host 1.5 - Arbitrary File Upload
---
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|
[»] ~ Note : This vulnerability allows you to upload if the "storage" file isn't protected with a htaccess file or
anything else
[»] Mini File Host v1.5 Remote File Upload Vulnerability
[»] Script: [ Mini File Host ]
[»] Language: [ PHP ]
[»] Site page: [ Mini File Host v1.5 ]
[»] Download: [ http://www.hotscripts.com/listing/mini-file-host/ ]
[»] Founder: [ Mr.Z ]
[»] Greetz to: [ all muslims , ViRuSMaN ]
###########################################################################
===[ Exploit ]===
Click on "Browse" and select your php shell
Click Upload
After it finishs , you w
Exploit-DB
Mini File Host 1.x - Arbitrary '.PHP' File Upload
exploitdb·2008-12-18
CVE-2008-6785 Mini File Host 1.x - Arbitrary '.PHP' File Upload
Mini File Host 1.x - Arbitrary '.PHP' File Upload
---
#########################################################
Portal Name: Mini File Host
Version: All version
Vendor : http://www.galaxyscripts.com
Dork: inurl:index.php?page=img Powered By Mini File Host
Author : Pouya_Server , [email protected]
Vulnerability : (Uploader Bypass)
#########################################################
[Mime Check Bypass]:
create a file called name.php and fill it as below:
GIF89aP;
[shell]
Save and upload !
[Video]:
http://pouya2006.persiangig.com/UploadVideo/minifile.rar
# milw0rm.com [2008-12-18]
No writeups or analysis indexed.
2009-05-01
Published