###################################################### # Exploit Title : CKFinder 2 Remote File Upload Vulnerability # # Author : Iranian Exploit Database # Discovered By : Medrik # Date : 2014 / 01 / 13 # Google Dork : inurl:/ckfinder/ckfinder.html # Vendor Homepage: http://cksource.com/ckfinder # Version: 2 # Tested on: Windows # ########## # # Exploit : # http://localhost/AnyPath/ckfinder/ckfinder.html # ######### # # Note : # # This Is Just Simple RFU Vuln .... # ######## # # Dem0 : # # http://lnsXw.gov.cn/ckfinder/ckfinder.html # http://www.wXhcgb.gov.cn/ckfinder/ckfinder.html # ######### # # Contact : # # Medrik.1990@yahoo.com # Twitter : /_medrik # FaceBook : /medrik4ever # ######### # # # Thanks To : IeDb , IrSecTeam , Attacker-Team , # Tnx To : Amir , Dr.3v1l