WordPress Plugin Frontend Upload – Arbitrary File Upload

• Exploit Database
• 35 阅读

• 作者： Daniel Godoy
  日期： 2014-02-11
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/31570/

• # Exploit Title: Frontend Upload WordPress Plugin - File Arbitrary Upload
  # Date: 10/02/2014
  # Author: Daniel Godoy
  # Author Mail: DanielGodoy[at]GobiernoFederal[dot]com
  # Author Web: www.delincuentedigital.com.ar
  # Software: Frontend Upload
  # http://codecanyon.net/item/frontend-upload/6076410?WT.ac=solid_search_item&WT.seg_1=solid_search_item&WT.z_author=gtPlugins
  # Tested on: Linux
  [Comment]Greetz: Ariel Orellana, TrustedBSD, Sunplace www.remoteexecution.net www.remoteexcution.com.ar
  
  [PoC]
  
  you can upload files with php extension. Example: c99.php, shell.gif.php, etc...
  
  http://localhost/wp-content/uploads/feuGT_uploads/feuGT_1790_43000000_948109840.php
  
  -------------------------
  Correo enviado por medio de MailMonstruo - www.mailmonstruo.com