Hi need some help here.
I am trying to exploit an unsanitized file upload with a PHP backdoor. Basically the file uploads successfully and I can see my backdoor inside the web applications
/images/ directory but when I click on the file to execute it I am give an error stating 'permission denied'.
(This is because only admin logins can access it).
Is there a way of uploading the file to another directory using a file inclusion vulnerability, so that my user can execute the file? I've search Google etc. but all examples and tutorials involve being able to access the file and execute it with normal privileges.
Note: This is a Web application I have permission to test.