MES : Turkish Meb.Gov.tr Subdomains Upload File Vulnerability

Turkish Meb.Gov.tr Subdomains Upload File Vulnerability -------------------------------------------------------------

Version One : Step 1 Open the page and sign up random turkish citizenship number Step 2 Rename index.html to index.jpg,index.jpg.html Step 3 Click upload button and select index file Success E.g : http://sisli.meb.gov.tr/ucretliogretmenlik/ http://silivri.meb.gov.tr/ucretliogretmenlik/ Version Two : Step 1 Open the page and click "2017-2018 Eğitim-Öğretim Yılı Ücretli Öğretmenlik Başvuru Formu" Step 2 sign up random turkish citizenship number,name... Step 3 Click upload button and select index file (index.html,index.jpg.html,index.jpg etc.) Success E.g : http://sultangazi.ucretliogretmen.xyz/basvuru/sgbasvuru2017.php http://arnavutkoy.ucretliogretmen.xyz/basvuru/abasvuru2017.php