#################################################################################################
# Exploit Title : Design & Develop by Mahamud Bangladesh Education Unauthorized Arbitrary Insert File Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 13/11/2018
# Vendor Homepage : facebook.com/cemahamud/
# Tested On : Windows and Linux
# Category : WebApps
# Google Dorks : intext:''Design & Develop by Mahamud.'' site:edu.bd
# Exploit Risk : Medium
# CWE : CWE-264 - [ Permissions, Privileges, and Access Controls ]
#################################################################################################
# Admin Login Panel Path :
/adminlogin
# Exploit :
/home/addmission
/Home/Addmission
+ Note => Right Click - Show Image Source Link.
# Directory File Path :
/uploads/[RANDOM-NUMBERS].txt
Note : Just use '' Upload File '' Button. You don't need to fulfill the form. Forget it.
Note 2 : Only this file extensions are allowed : jpg - gif - png - pdf - txt - docx.
#################################################################################################
# Example Vulnerable Sites =>
[+] napghs.edu.bd/home/addmission
[+] pbdm.edu.bd/home/addmission
[+] igmhs.edu.bd/home/addmission
[+] chakendakhs.edu.bd/home/addmission
[+] chanderhatghs.edu.bd/home/addmission
[+] cssdm.edu.bd/home/addmission
[+] cbphs.edu.bd/home/addmission
[+] kuhardahramsecondaryschool.edu.bd/home/addmission
[+] kamarparaschoolandcollege.edu.bd/home/addmission
[+] kmboulpuriamadrasha.edu.bd/home/addmission
[+] bswahejiadakhilmadrasha.edu.bd/home/addmission
[+] alokitobangladeshtbmcollege.edu.bd/home/addmission
[+] hamchapurdakhilmadrasah.edu.bd/home/addmission
[+] hartakitalaurfulsmritihighschool.edu.bd/home/addmission
[+] dpsecondaryschool.edu.bd/home/addmission
[+] gulgiaiamadrasha.edu.bd/home/addmission
[+] bamondanganmhs.edu.bd/home/addmission
[+] luxmikanta-hs.edu.bd/home/addmission
[+] chipabaraikhalisecondaryschool.edu.bd/home/addmission
[+] sprashidiahighschool.edu.bd/home/addmission
[+] salimabaddegreecollege.edu.bd/home/addmission
[+] holokhanahschool.edu.bd/home/addmission
[+] abdulazizmemorialhighschool.edu.bd/home/addmission
#################################################################################################
# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
#################################################################################################