WordPress Editor Monkey suffers from a remote shell upload vulnerability

skr praktek :

dork google ==> inurl:/plugins/editormonkey/

[ Vulnerable File ]

[patch]/wp-content/plugins/editormonkey/fckeditor/editor/filemanager/upload/test.html

[ Shell ]

[patch]/UserFiles/file-yg-km-upload.txt

[ demo ]

http://ideashaveconsequences.org/wp-content/plugins/editormonkey/fckeditor/editor/filemanager/upload/test​.html


yang hoby deface dan mau masuk urutan teratas zone-h pake ini biar cpt dpt korban

mumpung para adminnya blm pada patch sitenya ;))


nb:

Select the "File Uploader" to use:

==> ganti dengan PHP


Upload a new file:

==> browse dmn file km di simpen, katanya sih .txt

tp saya coba htm masuk nih http://ideashaveconsequences.org/UserFiles/index.htm


kl ada tulisan kek gini:

Warning: move_uploaded_file(xxxxxxxxxxxxxxxxxxxxxxxxxx

==>anda blm beruntung, coba lagi =)) anda berarti g bs di upload file

masih banyak yang terjaring

wushh, keren amat om. . .
ane ke tekapeh dolo. . .

dork nya ada yang baru lagi gak kk

maksute, file harus .txt ato .html ato .phph pak sing di uplod???