Drupal imce - File Upload Vulnerability

Hello Everyone!! Today i'll tell you about Drupal IMCE File Upload Vulnerability.
So now lets begin:-

• First find some vulnerable sites by using Google Dork: inurl:"/imce?dir=" 
• The vulnerable site will look something like this
  
  
• After that, click on upload button.
  
  
• Then upload your file, but you can only upload limited types of file. For example: .txt, .html.
  .php files are not allowed.
• After uploading your file, it may looked something like this
  
  
• You can see in the image, that I have upload web_ruler_0.txt.
• To access your file, double click on your uploaded file, then  your file name will shown at the downer side of your right hand side, in the window.
  
  
• Now have successfully done!!
  Ch33R$

Note:-This is only for educational purpose. We are not responsible for any harm or illegal activity done by you.

Feel Free To Leave A Comment If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!