DiyWeb exploit

Dork
"Power by DiyWeb"
inurl:/template.asp?menuid=
exploit  : diyweb/menu/admin/image_manager.asp
ejemplo


You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login

y con un poco de ingenio bypass

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login




y acá subiríamos nuestra shell

como somos chicos buenos le dejaremos un mensaje al admin

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login


saludos