Tmedit Popup Deface and Shell Upload Vulnerability

Hello today I will give you an idea of new exploits.

Google dork: inurl:/editor/tmedit/popups
Exploits: /editor/tmedit/popups/InsertFile/insert_file.php

Lets start.

1st go to google.com and search the dork  inurl:/editor/tmedit/popups . You can get some results.

Pick anyone of this. Now select your deface page and upload. After uploading click on uploaded file and you get the link.
By this way you can also upload shell.

Demo: http://www.bihap.org/uploadfiles/xd.html
             http://www.masjidklangchachengsao.com/uploadfiles/xd.html