Bugtraq File Upload Vulnerability

open Google.com and type this dork 
intitle:"QuiXplorer 2.3 - the QuiX project"



you'll see a lot of sites, some big websites are vuln too
select any website from search results 

Vulnerablity:


http://[localhost]/[path]/index.php?action=list&order=name&srt=yes



http://site.com/[xyz]/index.php?action=list&order=name&srt=yes

after Going to this you will saw a file manager 
you can upload your files here 

find this edit file create file etc icons in page and click on last, its upload option

Comments