发布 2015-08-28 漏洞条目

WordPress Plugin Responsive Thumbnail Slider 1.0 – Arbitrary File Upload

Exploit Source

# Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload

# Date: 2015/8/29

# Exploit Author: Arash Khazaei

# Vendor Homepage:

https://wordpress.org/plugins/wp-responsive-thumbnail-slider/

# Software Link:

https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip

# Version: 1.0

# Tested on: Kali , Iceweasel Browser

# CVE : N/A

# Contact : http://twitter.com/0xClay

# Email : 0xclay@gmail.com

# Site : http://bhunter.ir

# Intrduction :

# Wordpress Responsive Thumbnail Slider Plugin iS A With 6000+ Active

Install

# And Suffer From A File Upload Vulnerability Allow Attacker Upload Shell

As A Image .

# Authors , Editors And Of Course Administrators This Vulnerability To Harm

WebSite .

# POC :

# For Exploiting This Vulnerability :

# Go To Add Image Section And Upload File By Self Plugin Uploader

# Then Upload File With Double Extension Image

# And By Using A BurpSuite Or Tamper Data Change The File Name From

Shell.php.jpg To Shell.php

# And Shell Is Uploaded . :)

相关漏洞条目