Deface - Wordpress Mangboard Plugins File Upload Vulnerability

Hokya kali ini gw mau sharing tutor lagi nih xD
tanpa basa basi dan menunggu lama langsung saja cekidot xD ~


# Exploit Tittle            : Wordpress Mangboard Plugins File Upload Vulnerability

# Google Dork            : inurl:wp-content/plugins/mangboard/

# Date                         : 16-04-2017

# Exploit Author         : Isal Dot ID

# Vendor Homepage   : https://srd.wordpress.org/plugins/mangboard/

# Version                    : webapps

# Tested on                 : Windows 7


1. Description

    You can upload files without acces as author

2. Proof Of Concept

    Disini

3. Path Shell

    /wp-content/uploads/mangboard/years/month/random
    nomor/random_yourshell.php.gif



Greetz : Strlen - Jje Incovers - ReC0ded - Pak Haxor - Ice-cream - Panataran - ex-Sh1Ne - Malaikat_Galau - ViruzTomcat - AdrElite - Wonka  - Sh0uT0u7 - l0c4lh34rtz - Zombie-Root - KONSLET

Thanks To : Sanjungan Jiwa Team - Indonesian Defacer Tersakiti - Jembut Loyality - IndoXploit - Suram Crew - Extreme Crew - Bahari Trouble Maker - Indonesian People

Source : Isal Dot Id :D