Sploitus

Exploit for CVE-2020-9380

kitploit · 2026-09-04

Exploit Code

MARKDOWN44 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MIGUELTARGA-CVE-2020-9380
# إثبات المفهوم (PoC) لاستغلال IPTV Smarters

## الاستخدام

`python gld.py -u http://www.pirate-ilegal-tv.com/ -i`

## الثغرة

### ملف `includes/ajax-control.php`:

root@kitploit:~
    
    
    <?php
    /*
     * @ PHP 5.6
     * @ Decoder version : 1.0.0.1
     * @ Release on : 24.03.2018
     * @ Website    : http://EasyToYou.eu
     */
    
    session_start();
    if (file_exists("functions.php")) {
        include_once "functions.php";
        if (isset($_FILES["logoImage"])) {
            $target_dir = "../images/";
            $target_file = $target_dir . basename($_FILES["logoImage"]["name"]);
            if (move_uploaded_file($_FILES["logoImage"]["tmp_name"], $target_file)) {
                echo "images/" . $_FILES["logoImage"]["name"];
                exit;
            }
            echo "errorImage";
            exit;
        }
    

## لقطة الشاشة

![screenshot](https://assets.kitploit.com/production/public/readmes/29279/83e25aede5be8c2c286c46748ce33f90f1a0fe1dbb05fde294bfb4e22b32420a.png)

## سكربت شل تفاعلي بلغة بايثون.

![](https://assets.kitploit.com/production/public/readmes/29279/e05535f69d5cbc4687736f4166d0d0eae07e9460b73576ef5218ff78c64ed692.gif)