IMCE Remote File Upload Vulnerability

#Label: Hacking

#Category: Exploit

#Greetz to: Newbie-Security Team

1. Dork: inurl:"/imce?dir=" intitle:"File Browser"

2. Klik Root, Stelah Itu Upload File, isi Captha, Lalu Klik Upload !

3. Open Your File -> localhost.domain/sites/default/files/

Live Target:

http://www.worldagroforestry.org/imce?dir=.

http://www.sitnusa.org/imce?dir=.

contoh: http://localhost/sites/default/files/imagecache/index.html