WordPress Smallbiz Themes Remote File Uploads Vulnerability - Hallo sahabat Minato ET, Pada Artikel yang anda baca kali ini dengan judul WordPress Smallbiz Themes Remote File Uploads Vulnerability, kami telah mempersiapkan artikel ini dengan baik untuk anda baca dan ambil informasi didalamnya. mudah-mudahan isi postingan Artikel File Upload, Artikel RemoteFile, Artikel Wordpress, yang kami tulis ini dapat anda pahami. baiklah, selamat membaca.

Judul : WordPress Smallbiz Themes Remote File Uploads Vulnerability
link : WordPress Smallbiz Themes Remote File Uploads Vulnerability

WordPress Smallbiz Themes Remote File Uploads Vulnerability

#- Title: Wordpress Smallbiz Themes Remote File Uploads Vulnerability

#- Author: FullSecurity.org

#- Date: 09-02-2016

#- Developer : expand2web.com

#- Link Download : www.expand2web.com/smallbiz-theme/

#- Google Dork: inurl:"/themes/smallbiz/"

#- Fixed in Version : -

#- Tested on : Wessel

=======================================================

-- Proof Of Concept --

Vulnerability : site/wp-content/themes/smallbiz/palette/index.php

require("cpg.php");

if( $_GET['image'] ) // selected image from bookmark or get form
        $file = $_GET['image'];

if( $_FILES['userfile']['tmp_name'] ) // Upload detected captain!
        handle_upload();

When Vulnerable : 

Method :

1. Go to site.com/wp-content/themes/smallbiz/palette/index.php

2. Upload your image

3. if succes, click image & open in new tab

Demikianlah Artikel WordPress Smallbiz Themes Remote File Uploads Vulnerability

Sekianlah artikel WordPress Smallbiz Themes Remote File Uploads Vulnerability kali ini, mudah-mudahan bisa memberi manfaat untuk anda semua. baiklah, sampai jumpa di postingan artikel lainnya.

Anda sekarang membaca artikel WordPress Smallbiz Themes Remote File Uploads Vulnerability dengan alamat link https://minatoet.blogspot.com/2016/02/wordpress-smallbiz-themes-remote-file.html

Tweet