Wordpress gallery-bank Plugin Upload Vulnerability

2014.10.27

Credit: Mohit Amn

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:\"/wp-content/plugins/gallery-bank/\" \"upload.php\"

# Title                : Wordpress gallery-bank Plugin Upload Vulnerability
# Severity             : High+/Critical
# Reporter(s)          : Mohit Amn Security Team (Shahab Shamsi)
# Google Dork          : inurl:"/wp-content/plugins/gallery-bank/" "upload.php"
# Plugin Name          : gallery-bank
# Plugin Download Link : https://downloads.wordpress.org/plugin/gallery-bank.zip
# Vendor Home          : http://werdswords.com/
# Date                 : 25/08/2014
# Tested in            : Linux
# Video Link           : http://youtu.be/2Y0ZiTdX-o8

# PoC :

# Target.com/wp-content/plugins/gallery-bank/patch/upload.php

# - upload shell

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Wordpress gallery-bank Plugin Upload Vulnerability

Dork: inurl:\"/wp-content/plugins/gallery-bank/\" \"upload.php\"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.