Wordpress gallery-bank Plugin Upload Vulnerability

2014.10.27
Credit: Mohit Amn
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: inurl:\"/wp-content/plugins/gallery-bank/\" \"upload.php\"

# Title : Wordpress gallery-bank Plugin Upload Vulnerability # Severity : High+/Critical # Reporter(s) : Mohit Amn Security Team (Shahab Shamsi) # Google Dork : inurl:"/wp-content/plugins/gallery-bank/" "upload.php" # Plugin Name : gallery-bank # Plugin Download Link : https://downloads.wordpress.org/plugin/gallery-bank.zip # Vendor Home : http://werdswords.com/ # Date : 25/08/2014 # Tested in : Linux # Video Link : http://youtu.be/2Y0ZiTdX-o8 # PoC : # Target.com/wp-content/plugins/gallery-bank/patch/upload.php # - upload shell


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top