Missing Plugin Exploit

Google Dork: inurl:"user/auth/forgot"

[~] Step 1 : Find A social network using the Social Engine with MUSIC PLUGIN
[~] Step 2: Register A Fake Account
[~] Step 3: Click On Music Link in the menu or go to http://www.target.com/music
[~] Step 4: Click On Upload Music And Then Fill the Playlist info
[~] Step 5: Click On Add Music And Select The php file ( If you cansee php file in the upload window type *.* in the file name ).
[~] Step 6: And Click on save music to playlist
[~] Step 7: You Will See the Music Player Move the Cursor on the phpfilename and copy the link of the shell.Generaly it will be
http://www.target.com/public/music_song/1000000/[numbers]/[user_id]/[some_numbers].php