+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Upload shell on Vbulletin 4.2.0 patch 2 AdminCP (/showthread.php?tid=5390592)
Upload shell on Vbulletin 4.2.0 patch 2 AdminCP - krlo-s - Aug 29, 2016
Greetings Hackforums members how are you doing?
I got into a Vbulletin 4.2.0 patch 2 Admin control panel but I don't know where to upload my PHP shell. There's not any Plugin upload in XML. The upload links are custom language XML where i couldn't upload my shell in XML format and avatar picture upload where i couldn't upload my shell in .jpg nor .png format.
Any thoughts please? 😭
Many thanks for your time,
Kind regards
* - Aakash_Choudhary - Aug 29, 2016
Did you try this exploit :->
https://www.exploit-db.com/exploits/37815/
* - krlo-s - Aug 29, 2016
Thank you, i haven't tested it. However given the fact that i got the admin password and got into the admin panel isn't there any way to upload a shell from there? rather than looking for more vulnerabilities?. Is VB Admin Panel unexploitable anymore?