Lucene search
K

WordPress SB Uploader 3.9 Shell Upload

🗓️ 30 Dec 2012 00:00:00Reported by Evil aXeType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 57 Views

WordPress SB Uploader 3.9 Arbitrary File Upload Vulnerability, Exploit Details, Vulnerability : Arbitrary File Upload Vulnerability, Steps for Exploitatio

Code
`# Exploit Title: WordPress SB Uploader 3.9 Arbitrary File Upload Vulnerability  
# Exploit Author: Evil aXe  
# http://www.facebook.com/iChocolate.lips  
# Date: 30/12/12  
# Greetz: R3x0Man, Shadman tanjim, Shahee Mirza, JingoBD, ManInDark And All Crew and Members of Bangladesh Cyber Army.  
# Software Link: http://wordpress.org/extend/plugins/sb-uploader/  
# Version: 3.9  
# Category: webapps  
# Tested on: [Windows 7]  
# Google Dork : "inurl:plugins/sb-uploader"  
  
=====================  
Vulnerability : Arbitrary File Upload Vulnerability  
=====================  
Exploit Details :  
=====================  
  
1. Register  
2. Login [Confirm your email then login]  
3. Add a New post  
4. Write title,body something what you want :)  
5. Look at the Right slidbar " SB Uploader" panel and upload your file :)  
6. Publish the post  
7. You file is uploaded here : /wp/wp-content/uploads/2012/02/yourfile[.]ext  
  
=====================  
p0c: localhost/wp/wp-content/uploads/2012/12/cOol.htm  
=====================  
♥ BCA ♥  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation