Silentum Uploader Upload Vulnerability

Kali ini gua akan share Silentum Uploader Upload Vulnerability

 

Allowed file extensions: .doc, .htm, .html, .odt, .pdf, .rtf, .sxw, .txt and etc
ok let's go

Dork :

Inurl:upload.php intext:"htm html" site:.com / org / net etc
Intext:Powered by: Silentum Uploader




Demo All Website Vuln
http://bn.thedocumentsguy.com/upload.php
http://site.foilgraphicsgifts.com/upload.php
http://www.thiagocavaleiro.com.br/site/upload.php
http://site.foilgraphicsgifts.com/upload.php
http://www.webstyling.it/script/php/upload/3/upload.php
http://actorsal.com/upload.php
http://www.hiphopcars.com/black_models_divas/upload.php

yang mau hasil upload nya ,
http://site/[path]/files/yang km upload .html

Contoh : http://www.graphicbrain.com/upload/files/