bug file upload di plugins "WordPress Zarzadzanie Kontem" ( ajax file manager )

 lansung saja kita lihat  POC nya
[ type attack ]
tamper data

[ dork ]
inurl:"ajaxfilemanager.php?page=" intitle:ajax file manager

[ demo ]
http://www.madiunkab.go.id/qwerty/filemanager/ajaxfilemanager.php?page=3
http://www.hacker-motor.com/javascript/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php?page=5