Ashiyane DST Discover WordPress Userpro Remote File Upload Bug
Userpro Wordpress Userpro Remote File Upload
Security researchers at Iranian team Ashiyane Digital Security Team have discover remote file upload vulnerability in Wordpress -Google Dork: inurl:/wp-content/plugins/userpro/- Vulnerability risk is rated as high by cxsecurity.com
This module -requires using Metasploit- exploits an arbitrary PHP code upload in the wordpress Ifileupload plugin The vulnerability allows for unauthorization file upload and remote code execution.
Exploit is make by: T3rm!nat0r5
All vulns find by Ashiyane: https://cxsecurity.com/search/author/DESC/AND/FIND/0/10/Ashiyane+Digital+Security+Team/
T3rm!nat0r5 contact: [email protected]
Ashiyane home: http://ashiyane.org/