uploadcare File Upload vulnerability

uploadcare File Upload vulnerability

Published	Credit	Risk
2017.05.14	sohaip-hackerDZ	Medium

CWE	CVE	Local	Remote
N/A	N/A	No	Yes

Dork: inurl:"/uploadcare/"

# Exploit Title : uploadcare File Upload vulnerability
# Exploit Author: sohaip-hackerDZ
# Date : 2017-05-12
# DORK : inurl:"/uploadcare/"
# Vendor Homepage: https://uploadcare.com/
# Tested on : linux mint
#
# [+] Exploit : http://127.0.0.1/path/uploadcare/dialog.php
#
#################################################################################
#
# [+] Demo :
#
# http://www.cyprium.co.uk/ckeditor_pre/plugins/uploadcare/dialog.php
#
# [+] File Location :https://ucarecdn.com/22a791f9-0eef-467f-90e3-e2589bc809f7/
#
#################################################################################
# fp >> https://www.facebook.com/sohaipbarika/
# forum >> http://www.spyhackerz.com/forum/
# web site >> http://www.tools-hack.com/
# Discovered By: sohaip-hackerDZ