Frameset.php Upload vulnerability
Maaf kalo repost hapus aja
Dork : inurl:filemanager/frameset.php
Allow file : gif, jpg, htm, html, pdf, txt, zip
lalu pilih target
lalu pilih upload newfile
pilih file lalu upload
Live Target :
http://ivgp.ru/skins/default/js/tiny_mce...ameset.php
http://www.steulaliegites.com/tinymce/js...ameset.php
http://www.comune.biccari.fg.it/tinymce/...ameset.php
klik url yang dikiri
misal
AndikaHNc.html Lalu klik view yang ada di kanan
ntar hasilnya jadi begini
http://www.steulaliegites.com/tinymce/js...kaHNc.html
http://www.comune.biccari.fg.it//tinymce...kaHNc.html
http://ivgp.ru/skins/default/js/tiny_mce...kaHNc.html
gak nolak cendol
