Developed Softing Colombia - Arbitrary File Upload

# Exploit Title: Developed Softing Colombia - Arbitrary File Upload
# Google Dork: intext:"Desarrollado por Softing Colombia"
# Date: 17 December 2017 (Indonesia)
# Exploit Author: AlHikam0x
# Tested on: Ubuntu

Proof of Concept
1. Check Vulnerability.
https://web-target/server/php/

View image : Disini

2. Array type Upload : files[]
 CSRF online
3. Check file uploaded. https://web-target/server/php/files/file.php