Ajax File Manager [Shell Upload Vuln]

 

Assalamualaikum :D
Hello guys, back with me hehe.
Okay i will teach you abot deface.
Yeah.. for skip time ? lets we discussion :D


In there, i use dork:
- inurl:editor/plugins/ajaxfilemanager

Poc:
- http://localhost/patch/fikri/editor/plugins/ajaxfilemanager/ajaxfilemanager.php
Yeah we found others target.

And than ? you can upload your File :P hhee
For preview ?
Use your skill haha :P

Okay, i give you live target :D
- http://www.yourtrip-cn.com/fckeditor/editor/plugins/ajaxfilemanager/ajaxfilemanager.php
- http://artvid.com.ua/editor/plugins/ajaxfilemanager/ajaxfilemanager.php
- http://www.fairtradegroupnepal.org/editor/plugins/ajaxfilemanager/ajaxfilemanager.php

This exploit very Difference with Tiny_mCe that.
You can see for yourself the difference :D
Good Luck All ^_^


Sumber