Thursday, May 26, 2016

Remote file upload vulnerbility | Durpal IMCE Mkdir remote File upload







This is a very simple remote file upload on drupal in which you can upload defaces,jpgs,p,asp,shell.asp;me ..etcetc
Google Dorks :inurl:"/imce?dir="
intitle:"File Browser"
: http://website.com/imce?dir=
Shell Access :http://website.com/files/yourfilehere
http://www.website.com/abc/files/abc/yourfilehere




live exapmle:http://www.music-orality-roots.eu/sites/default/files/events/inrud3rdev_1.jpg

No comments:

Post a Comment