Konuyu Oyla:
  • Derecelendirme: 3/5 - 2 oy
  • 1
  • 2
  • 3
  • 4
  • 5
Wordpress Plugin Reflex Gallery - Arbitrary File Upload
#1




www.deccal.org

# Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload
# TIPE: Arbitrary File Upload
# Google DORK: inurl:"wp-content/plugins/reflex-gallery/"
# Vendor: https://wordpress.org/plugins/reflex-gallery/
# Tested on: Linux
# Version: 3.1.3 (Last)
# EXECUTE: php exploit.php http://www.alvo.com.br shell.php
# OUTPUT: Exploit_AFU.txt
# REF COD: http://1337day.com/exploit/23369
# Path: wp-content/plugins/reflex-gallery/admin/scripts/FileUploader/php.php
# add Month and Year in GET for Folder of Shell: ./wp-content/uploads/" .$_GET['Year'].'/'.$_GET['Month']. "

Vulnerable File: php.php
50. if(!move_uploaded_file($_FILES['qqfile']['tmp_name'], $path)){
173. $result = $uploader->handleUpload('../../../../../uploads/'.$_GET['Year'].'/'.$_GET['Month'].'/');


# Exploit:

Hide Post


# Shell Path: http://127.0.0.1:1337/wordpress/wp-conte...ckdoor.php

Cyberizm.org [2015-03-17]
Beğenenler:
#2
Ellerine sağlık abim
En büyük acizlik,kendinden başkası gibi görünmektir.
Beğenenler:
#3
eline sağlık dostum exciting
www.deccal.org


Beğenenler:
#4
Elinize sağlık
Beğenenler:
#5
sağolasın...
Beğenenler:
#6
saol teşekkürler
Beğenenler:
#7
Sağol
Beğenenler:

Konu ile Alakalı Benzer Konular
Konular Yazar Yorumlar Okunma Son Yorum
  WordPress TimThumb Dorkları + Cyberizme Özel KingSkrupellos 73 4,364 Dün, Saat: 14:05
Son Yorum: SheelWe
  Wordpress "Js Support Ticket" File Upload Bypass Extensions Mr.F92 16 532 03-12-2016, Saat: 00:10
Son Yorum: Slowycan
  sacro CMS unrestricted upload You LosT 3 187 30-11-2016, Saat: 02:51
Son Yorum: 0xfans
  WP Premium Gallery Manager Plugin Dosya Yükleme Açığı KingSkrupellos 7 106 27-11-2016, Saat: 15:07
Son Yorum: Efetimi
  WordPress TheAgency Teması Dosya Yükleme Açığı KingSkrupellos 10 173 27-11-2016, Saat: 11:37
Son Yorum: R3D
Anahtar Kelimeler

Wordpress Plugin Reflex Gallery - Arbitrary File Upload indir, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Videosu, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Online izle, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Bedava indir, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Yükle, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Hakkında, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Nedir, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Free indir, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Oyunu, Wordpress Plugin Reflex Gallery - Arbitrary File Upload Download


1 Ziyaretçi