Boxmanager upload vuln(Shell)

Google Dorks:inurl:"default_image.asp"
inurl:"default_imagen.asp"
inurl:"/box_image.htm"



contoh:-

http://www.bid1.co.kr/cgi/upload_img/defacer.html2
http://www.neximage.co.kr/cgi/upload_img/defacer.html

Credit:PhantomCrews.