Aplikasi E - S A K I P v1.1 File Manager File Upload

Aplikasi E - S A K I P v1.1 Indonesian Goverment File Manager File Upload

Dork:

inurl:/portal/home/kontak_view

Exploit1 : site.com/plugins/tinymce/js/tinymce/plugins/filemanager/dialog.php 

Upload your file

File Location : The files you upload will go to site.go.id/uploads/yourfile

Exploit2 : site.com/plugins/tinymce/js/tinymce/plugins/filemanager/upload.php

CSRF

https://pastebin.com/uetCRX9q

File Location : The files you upload will go to site.go.id/plugins/tinymce/js/tinymce/plugins/filemanager/yourfile.php

source:

https://cxsecurity.com/issue/WLB-2021010087