"Add Testimonial" ~ remote File upload vulnerability.

Share

"Add Testimonial" ~ remote File upload vulnerability.

"Add Testimonial" ~  remote File upload vulnerability.





[#1] Open website ..

[#2] Go to this URL : testimonial/add.html.php 

For example :  http://Site.com/testimonial/add.html.php

[#3] Now Upload Your Deface or any file

[#4] to view you upload file go to /images/testimonial/ , you'll se index of files here ... click on last file, its urs !!

[#5] enjOy =) Leave a Comment beLow if you Like it

Demo :

http://sdhealingarts.com/testimonial/add.html.php?
http://slangmediagroup.com/testimonial/add.html.php?

http://thepharmcollective.com/testimonial/add.html.php?

http://www.ganjadaddy.com/demo/firestation/testimonial/add.html.php?

Result : http://slangmediagroup.com/images/testimonial/testim_20111218213043

http://www.ganjadaddy.com/demo/firestation//images/testimonial/testim_20111218215509