Konuyu Oyla:
  • Toplam: 1 Oy - Ortalama: 5
  • 1
  • 2
  • 3
  • 4
  • 5
   
Konu: Drupal 7 jQuery Italia Fi.it Scrivi Al Comune Exploit
KingSkrupellos
*
avatar
Hacktivist
Durum: Çevrimdışı
Seviye Puanı: 56
Yaşam Puanı: 1,386 / 1,386
Deneyim: 46 / 100
Rep Sayısı: 2873
Mesaj Sayısı: 6511
Üyelik Tarihi: 21.08.2013
     
Yorum: #1
Drupal 7 jQuery Italia Fi.it Scrivi Al Comune Exploit
20.06.2018 02:31
################################################################################​#################

# Exploit Title : Drupal 7 jQuery ItalianGov Fi.it Scrivi Al Comune Arbitrary File Upload Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 20/06/2018
# Vendor Homepage : regione.toscana.it - jquery.com
# Tested On : Windows
# Version : 7
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-287 [ Improper Authentication ] + CWE-284 [ Improper Access Control ]

################################################################################​#################

# Google Dorks :

intext:''Scrivi al Comune'' site:fi.it

Il testo del tuo messaggio * site:fi.it

# Exploits :

/scrivi-al-comune
/scrivi-al-comune-0
/segnalazioni-e-reclami-0
/scrivi-al-sindaco-0
/node/19

# Path : /sites/www.comune.DOMAINADDRESS.fi.it/files/webform/.....

# Note => Allowed File Extensions : gif jpg png tif txt rtf odf pdf doc docx xls xlsx.

# Don't forget to put www. before comune. on the URL Address bar.

################################################################################​#################

# Example Sites and Target IP => 159.213.236.225

[ Proof of Concept for Vulnerability and Exploit ] => archive.is/zUN5z - archive.is/3IMxH

comune.vicchio.fi.it/segnalazioni-e-reclami-0
comunebarberino.it/scrivi-al-comune
comune.borgo-san-lorenzo.fi.it/scrivi-al-comune-0
comune.bagno-a-ripoli.fi.it/scrivi-al-sindaco-0
comune.rignano-sullarno.fi.it/scrivi-al-comune
comune.pontassieve.fi.it/scrivi-al-comune-0
comune.marradi.fi.it/scrivi-al-comune
comune.dicomano.fi.it/scrivi-al-comune-0
comune.reggello.fi.it/scrivi-al-comune-0
comune.palazzuolo-sul-senio.fi.it/scrivi-al-comune
comune.scarperiaesanpiero.fi.it/scrivi-al-comune
comune.provagliodiseo.bs.it/node/19
comune.terni.it/scrivi-al-comune

################################################################################​#################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

################################################################################​#################

# Cyberizm Digital Security Technological Turkish Moslem Army #
# İnsanda bir organ vardır. Eğer o sağlıklı ise bütün vücut sağlıklı olur;
eğer o bozulursa bütün vücut bozulur. Dikkat edin! O, kalptir.
[ Hz.Muhammed S.A.V ] #


Alinti
MECZUP
*
avatar
Binbaşı
Durum: Çevrimdışı
Seviye Puanı: 29
Yaşam Puanı: 713 / 713
Deneyim: 55 / 100
Rep Sayısı: 40
Mesaj Sayısı: 1139
Üyelik Tarihi: 18.12.2017
      
Yorum: #2
Cvp: Drupal 7 jQuery Italia Fi.it Scrivi Al Comune Exploit
20.06.2018 14:07
Teşekkürler, Emeğine Sağlık Smile
Alinti



1 Ziyaretçi