[+] Arbitrary Upload on BigDump v0.35b
[+] Date: 23/03/2014
[+] Risk: High
[+] Author: Felipe Andrian Peixoto
[+] Vendor Homepage:
http://www.ozerov.de/bigdump/
[+] Contact:
felipe_andrian@hotmail.com
[+] Tested on: Windows 7 and Linux
[+] Vulnerable File: bigdump.php
[+] Version: v0.35b
[+] Exploit :
http://host/bigdump.php?start=
[+] PoC:
http://SERVER/bigdump.php?start=
Note: allows upload files and shells with tamperdate.