Lucene search
K

WordPress Magn WP Drag And Drop Shell Upload

🗓️ 23 Feb 2012 00:00:00Reported by JingoBDType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 37 Views

Wordpress Magn WP Drag And Drop Shell Upload vulnerability by JingoBD. Allows shell upload via drag and drop in the media uploader. Version 0.9 tested on Linux and Win7

Code
`[x] Wordpress Magn WP Drag and Drop Upload Shell Upload Vulnerability  
[x] Author: JingoBD [http://facebook.com/life.is.code]  
[x] Bangladesh Cyber Army  
[x] Download Link:  
http://wordpress.org/extend/plugins/magn-html5-drag-and-drop-media-uploader/  
[x] Version : 0.9 (Last Version)  
[x] Tested On: Linux(Ubuntu) & Win7 32  
  
-[Exploit]-:  
[*] Dork: No Dork For Kids. :p  
[*] Register vulnerable site. www.site.com/wp-register.php [N.B: If  
public registration disable This exploit is not work]  
[*] Confrim your email, then login.  
[*] Add a new post and Drag and Drop your shell[PHP SHELL] in  
Drag,Drop Box. It show Error.  
[*] Your shell:  
http://localhost/wp-content/plugins/magn-html5-drag-and-drop-media-uploader/temp/SHELL.php  
  
=================================================================  
We Are: --| Bedu33n, N!1l Rex0Man, ManInDark, Escape X0ne(Eclipse ),  
Desert_Rose, 00xnull, 34GL3_3Y3, 5!L3NT @55@55!N, s1l3n7 BD, Rudr0  
Akash, p5YcH0 d0d93r, Tr0oN |--  
=================================================================  
BANGLADESH CYBER ARMY  
http://facebook.com/BDCyberArmy  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation