Asset Manager :Shell and Files upload Vulnerability

Asset Manager :Shell and Files upload Vulnerability


Google Dork : "inurl:Editor/assetmanager/assetmanager.asp"Open Google.com/ncr and enetr this dork 

"inurl:Editor/assetmanager/assetmanager.asp"


Now Open any site from search results 


Now You will Got a Page Like That 

New Folder  Del Folder

Upload File:   and site url will be like site.com/Editor/assetmanager/assetmanager.asp Change The Flash into all Files and Now choose Your File and Upload and acess Your file here site.com/Editor/assets/yourfilehere Special : How To upload a cool deface ;) Go; to http://www.flashvortex.com/ and choose a cool design .. Now put your text and download it ..  rename the file After Downloading and upload it :) Demo - http://www.1bakersfield.com//Editor/assets/devilscafe.swf http://www.1bakersfield.com/Editor/assets/devilscafe2.swf