Lucene search

K
exploitdbAshiyane Digital Security TeamEDB-ID:28452
HistorySep 22, 2013 - 12:00 a.m.

WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload

2013-09-2200:00:00
Ashiyane Digital Security Team
www.exploit-db.com
19

AI Score

7.4

Confidence

Low

#######################################################################
# Exploit Title :  Wordpress Lazy SEO plugin Shell Upload Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Google Dork: : inurl:/wp-content/plugins/lazy-seo/
#
# Date: 2013/09/21
#
# Vendor Homepage : http://wordpress.org/plugins/lazy-seo
#
# Software Link : http://downloads.wordpress.org/plugin/lazy-seo.1.1.9.zip
#
# Version : 1.1.9
#
# Tested on: Windows
#
##############
#
#Location: Site/wp-content/plugins/lazy-seo/lazyseo.php
#
##############
#1.Go to address : Site/wp-content/plugins/lazy-seo/lazyseo.php
#2.Click on Browse...
#3.Select Shell Code
#3.Complete the fields
#4.Press Enter
#5.Shell Address : wp-content/plugins/lazy-seo/Shell.php
##############
#
# Discovered By : ACC3SS
#
##############

AI Score

7.4

Confidence

Low