============================================================================
# Exploit Title: xupload - Arbitrary File Upload
# Date: 8/27/2017
# Exploit Author: Sarbaz_Vatan
# Tested on: Windows 7
# Dorks: inurl:"upload_form.html" |OR| intitle:"xupload" inurl:"upload_form.html"
============================================================================
[+]Demo:
- http://www.aphr.ir/android/PanelForm/upload_form.html
- http://majlisashura.com/upload_form/upload_form.html
- http://www.imageurl.ir/index.php
- http://juxtamedia.com/upload_form.html
- http://www.cocobest.net/doc/upload_form.html
- ftp://www.lhotkanet.cz/mirror/asterisk-gui/team/rbrindley/features_revamp/config/upload_form.html
- http://www.jameschang.com/upload_form.html
- http://www.ourwebprojects.com/xupload/upload_form.html
- http://www.855quiktax.com/upload_form/upload_form.html