<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2075625959876821464&zx=82178665-b402-4771-9709-c2f77018a47d' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2075625959876821464&zx=82178665-b402-4771-9709-c2f77018a47d' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<!-- data-ad-client=ca-pub-3428786163294811 -->

</head><body>

RiteCMS 2.2.1 Authenticated Remote Code Execution

cyberweb

06:11

0 Yorumlar

RiteCMS 2.2.1 Authenticated Remote Code Execution

Merhaba sevgili CyberrWeb takipçileri, bir çok web sitesinde karşılaştığımız bir hata sonucu oluşan genelde özellikle acemi site kurucularının yaptığı bir hata olan sitenin default kurulum bilgilerini değiştirmeme hatası, hackerler için çok büyük fırsatlar doğuruyor!

RiteCMS 2.2.1'de tespit edilen bu zafiyetin detayları aşağıdaki videoda DENNI5 kod adlı defacer güzel bir şekilde anlatılmış.

KULLANIM VİDEO

RiteCMS 2.2.1 Authenticated Remote Code Execution

byZymper Twich-Mart 22, 2021

RiteCMS 2.2.1 Authenticated Remote Code Execution

Merhaba sevgili HackerHub takipçileri, bir çok web sitesinde karşılaştığımız bir hata sonucu oluşan genelde özellikle acemi site kurucularının yaptığı bir hata olan sitenin default kurulum bilgilerini değiştirmeme hatası, hackerler için çok büyük fırsatlar doğuruyor!

RiteCMS 2.2.1'de tespit edilen bu zafiyetin detayları aşağıdaki videoda DENNI5 kod adlı defacer güzel bir şekilde anlatılmış.

KULLANIM VİDEO

Zafiyet Detayları : https://www.exploit-db.com/exploits/48915
Dork : intext:"Powered by RiteCMS"

Bu zafiyet için yazılmış bir script'de mevcut bulunmakta eğer hızlı bir şekilde mevcut RiteCMS kurulu siteler üzerinde denemek isterseniz aşağıdaki DOWNLOAD yazısına tıklamanız yeterlidir.

DOWNLOAD

Önceki Kayıtlar

Daha Yeni Kayıtlar

Paylaş

Facebook WhatsApp Twitter Telegram Line Tumblr LinkedIn Pinterest

Blog yazarları

cyberweb

Bu yayınları beğenebilirsiniz

Yorum yok

<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/523887051-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY5UxJM99K-AInLkpwoKOV7OdO4Dpg:1716166559845';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d2075625959876821464','//cyberrweb.blogspot.com/2021/03/ritecms-221-authenticated-remote-code_21.html','2075625959876821464');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '2075625959876821464', 'title': 'CyberWeb', 'url': 'https://cyberrweb.blogspot.com/2021/03/ritecms-221-authenticated-remote-code_21.html', 'canonicalUrl': 'https://cyberrweb.blogspot.com/2021/03/ritecms-221-authenticated-remote-code_21.html', 'homepageUrl': 'https://cyberrweb.blogspot.com/', 'searchUrl': 'https://cyberrweb.blogspot.com/search', 'canonicalHomepageUrl': 'https://cyberrweb.blogspot.com/', 'blogspotFaviconUrl': 'https://cyberrweb.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'tr', 'localeUnderscoreDelimited': 'tr', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22CyberWeb - Atom\x22 href\x3d\x22https://cyberrweb.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22CyberWeb - RSS\x22 href\x3d\x22https://cyberrweb.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22CyberWeb - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/2075625959876821464/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22CyberWeb - Atom\x22 href\x3d\x22https://cyberrweb.blogspot.com/feeds/475687896523990700/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-3428786163294811', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/5189a333a5515c96', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Ba\u011flant\u0131y\u0131 al', 'key': 'link', 'shareMessage': 'Ba\u011flant\u0131y\u0131 al', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Facebook platformunda payla\u015f', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Twitter platformunda payla\u015f', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Pinterest platformunda payla\u015f', 'target': 'pinterest'}, {'name': 'E-posta', 'key': 'email', 'shareMessage': 'E-posta', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27tr\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Devam\u0131n\u0131 Oku \xbb', 'pageType': 'item', 'postId': '475687896523990700', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-7L0UOhF8MaEVocUdDH3tgPoQkeK804gxZ7g08Rk_XPNWcVnawtG_w_lFVaxBLaeOpSIg5yjNj2oSIk8d-TPnWpeyuAVaIC38LuFFKM9T-SSF9Ie7FFsMn7-cZqXy9qRPFtnoKjxgkSyi/s72-w640-c-h360/YouHaveBeenHacked.jpg', 'postImageUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-7L0UOhF8MaEVocUdDH3tgPoQkeK804gxZ7g08Rk_XPNWcVnawtG_w_lFVaxBLaeOpSIg5yjNj2oSIk8d-TPnWpeyuAVaIC38LuFFKM9T-SSF9Ie7FFsMn7-cZqXy9qRPFtnoKjxgkSyi/w640-h360/YouHaveBeenHacked.jpg', 'pageName': 'RiteCMS 2.2.1 Authenticated Remote Code Execution', 'pageTitle': 'CyberWeb: RiteCMS 2.2.1 Authenticated Remote Code Execution', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'D\xfczenle', 'linkCopiedToClipboard': 'Ba\u011flant\u0131 panoya kopyaland\u0131!', 'ok': 'Tamam', 'postLink': 'Yay\u0131n Ba\u011flant\u0131s\u0131'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': '\xd6zel', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'RiteCMS 2.2.1 Authenticated Remote Code Execution', 'description': '', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-7L0UOhF8MaEVocUdDH3tgPoQkeK804gxZ7g08Rk_XPNWcVnawtG_w_lFVaxBLaeOpSIg5yjNj2oSIk8d-TPnWpeyuAVaIC38LuFFKM9T-SSF9Ie7FFsMn7-cZqXy9qRPFtnoKjxgkSyi/w640-h360/YouHaveBeenHacked.jpg', 'url': 'https://cyberrweb.blogspot.com/2021/03/ritecms-221-authenticated-remote-code_21.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 475687896523990700}}, {'name': 'widgets', 'data': [{'title': 'CyberWeb (\xdcstbilgi)', 'type': 'Header', 'sectionId': 'Header', 'id': 'Header1'}, {'title': 'Nav Menu', 'type': 'HTML', 'sectionId': 'Navigation', 'id': 'HTML100'}, {'title': 'Follow Us', 'type': 'LinkList', 'sectionId': 'Navigation', 'id': 'LinkList102'}, {'title': 'Blog Kay\u0131tlar\u0131', 'type': 'Blog', 'sectionId': 'Page_Body', 'id': 'Blog1', 'posts': [{'id': '475687896523990700', 'title': 'RiteCMS 2.2.1 Authenticated Remote Code Execution', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-7L0UOhF8MaEVocUdDH3tgPoQkeK804gxZ7g08Rk_XPNWcVnawtG_w_lFVaxBLaeOpSIg5yjNj2oSIk8d-TPnWpeyuAVaIC38LuFFKM9T-SSF9Ie7FFsMn7-cZqXy9qRPFtnoKjxgkSyi/w640-h360/YouHaveBeenHacked.jpg', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Yazar'}, {'name': 'timestamp', 'label': 'zaman:'}, {'name': 'comments', 'label': 'yorum'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Yazar'}, {'name': 'timestamp', 'label': 'zaman:'}, {'name': 'comments', 'label': 'yorum'}]}, {'title': 'Tips', 'type': 'HTML', 'sectionId': 'Post_by_Labels', 'id': 'HTML110'}, {'title': 'Label', 'type': 'Label', 'sectionId': 'Sidebar', 'id': 'Label1'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'Sidebar_sticky', 'id': 'PopularPosts1', 'posts': [{'title': 'SQLI VULNERABILITY SCANNER', 'id': 300441872581711069}, {'title': 'BORDERLANDS 2 REMESTERED', 'id': 946134770520795341}, {'title': 'C# PROGRALAMA D\u0130L\u0130 ', 'id': 4962189782778605939}, {'title': '[FREE] Zombie Bot V14', 'id': 892309750011731833}, {'title': 'NBA 2K20', 'id': 4434725801004293020}, {'title': 'Slayer Leecher v0.2 Orjinal', 'id': 8612426481577887322}, {'title': 'RiteCMS 2.2.1 Authenticated Remote Code Execution', 'id': 475687896523990700}, {'title': 'Layer-7 DDoS Attack Script [PR\u0130V8]', 'id': 658110819859188889}, {'title': 'Online Reverse Hash Tool v3.3', 'id': 1029236717236018621}, {'title': 'HISOKA DDoS Script', 'id': 2141134033131235456}]}, {'title': 'About Us', 'type': 'HTML', 'sectionId': 'Footer_1', 'id': 'HTML120'}, {'title': 'Our Site', 'type': 'PageList', 'sectionId': 'Footer_2', 'id': 'PageList121'}, {'title': 'Plugin - Insert to Post', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML200'}, {'title': 'Plugin - Watermark', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML201'}, {'title': 'Plugin - Table of Content', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML202'}, {'title': 'Plugin - Live Search', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML203'}, {'title': 'Plugin - Disable Copy/Paste', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML204'}, {'title': 'Plugin - Shortlink', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML205'}, {'title': 'Plugin - Safelink', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML207'}, {'title': 'Plugin - Single Page Application', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML208'}, {'title': 'Plugin - Split Post', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML209'}, {'title': 'Plugin - Lightbox', 'type': 'HTML', 'sectionId': 'Settings', 'id': 'HTML210'}]}]);
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'Header', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML100', 'Navigation', document.getElementById('HTML100'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList102', 'Navigation', document.getElementById('LinkList102'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'Page_Body', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1857752057-lbx__tr.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML110', 'Post_by_Labels', document.getElementById('HTML110'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'Sidebar', document.getElementById('Label1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'Sidebar_sticky', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML120', 'Footer_1', document.getElementById('HTML120'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList121', 'Footer_2', document.getElementById('PageList121'), {'title': 'Our Site', 'links': [{'isCurrentPage': false, 'href': '#', 'title': 'About Us'}, {'isCurrentPage': false, 'href': '#', 'title': 'Contact Us'}, {'isCurrentPage': false, 'href': '#', 'title': 'Terms of Service'}, {'isCurrentPage': false, 'href': '#', 'title': 'Disclaimer'}, {'isCurrentPage': false, 'href': '#', 'title': 'Privacy Policies'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML200', 'Settings', document.getElementById('HTML200'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML201', 'Settings', document.getElementById('HTML201'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML202', 'Settings', document.getElementById('HTML202'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML203', 'Settings', document.getElementById('HTML203'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML204', 'Settings', document.getElementById('HTML204'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML205', 'Settings', document.getElementById('HTML205'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML207', 'Settings', document.getElementById('HTML207'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML208', 'Settings', document.getElementById('HTML208'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML209', 'Settings', document.getElementById('HTML209'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML210', 'Settings', document.getElementById('HTML210'), {}, 'displayModeFull'));
</script>
</body>

RiteCMS 2.2.1 Authenticated Remote Code Execution

RiteCMS 2.2.1 Authenticated Remote Code Execution

KULLANIM VİDEO

RiteCMS 2.2.1 Authenticated Remote Code Execution

RiteCMS 2.2.1 Authenticated Remote Code Execution

KULLANIM VİDEO

Paylaş

Blog yazarları

Bu yayınları beğenebilirsiniz

#{title}

Yorum yok

SQLI VULNERABILITY SCANNER

BORDERLANDS 2 REMESTERED

C# PROGRALAMA DİLİ

[FREE] Zombie Bot V14

NBA 2K20

Slayer Leecher v0.2 Orjinal

RiteCMS 2.2.1 Authenticated Remote Code Execution

Layer-7 DDoS Attack Script [PRİV8]

Online Reverse Hash Tool v3.3

HISOKA DDoS Script