Welcome to The Forum

Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to

existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile

and so much more. This message will be removed once you have signed in.

Active Hackers

The best community of active hackers. This community has been working in hacking for more than 10 years.

 

Hacker Forum

Hacker from all countries join this community to share their knowledge and their hacking tools

    Hacking Tools

    You can find thousands of tools shared by hackers. RAT's, Bot's, Crypters FUD, Stealers, Binders, Ransomware, Mallware, Virus, Cracked Accounts, Configs, Guides, Videos and many other things.

      PRIV8

      Become a Priv8 user and access all parts of the forum without restrictions and without limit of download. It only costs 100 dollars, and it will last you for a lifetime.

      Read Rules

      In this community we follow and respect rules, and they are the same for everyone, regardless of the user's rank. Read the rules well not to be prohibited.

      Sign in to follow this  
      1337day-Exploits

      WordPress 5.0.0 crop-image Shell Upload

      Recommended Posts

      This Metasploit module exploits a path traversal and a local file inclusion vulnerability on WordPress versions 5.0.0 and versions below or equal to 4.9.8. The crop-image function allows a user, with at least author privileges, to resize an image and perform a path traversal by changing the _wp_attached_file reference during the upload. The second part of the exploit will include this image in the current theme by changing the _wp_page_template attribute when creating a post. This exploit module only works for Unix-based systems currently.

      Hidden Content

        Give reaction to this post to see the hidden content.

      • Like 4
      • Thanks 1

      Share this post


      Link to post
      Share on other sites
      Guest
      This topic is now closed to further replies.
      Sign in to follow this  

      • Similar Content

        • By itsMe

          Hidden Content
          Give reaction to this post to see the hidden content. Bimber is a viral magazine theme, that lets you launch a fully functional viral site in no more than 24 hours. It comes with powerful sharing buttons; popular, hot, trending listings and multiple ad locations. Everything in a lightweight and easy-to-use package. Just start today and go viral today!

          Hidden Content
          Give reaction to this post to see the hidden content.
          Hidden Content
          Give reaction to this post to see the hidden content.
        • By itsMe

          Hidden Content
          Give reaction to this post to see the hidden content. WordPress Creation Kit helps you develop intuitive WordPress sites, easily manageable by your clients, in half the time and without writing a single line of PHP code.

          Hidden Content
          Give reaction to this post to see the hidden content.  
          Hidden Content
          Give reaction to this post to see the hidden content.
          Hidden Content
          Give reaction to this post to see the hidden content.  
           
        • By itsMe

          Hidden Content
          Give reaction to this post to see the hidden content. Aardvark is a complete community focussed WordPress theme. Buy with confidence from an elite author specialising in BuddyPress themes.
          Hidden Content
          Give reaction to this post to see the hidden content.
          Hidden Content
          Give reaction to this post to see the hidden content.
        • By itsMe

          Hidden Content
          Give reaction to this post to see the hidden content. The7 v8.1.0 NULLED — Multi-Purpose Website Building Toolkit for WordPress
          The7 | the Most customizable WordPress Theme on the Market!
          The7 features full and seamless integration with WPBakery Page Builder (formerly Visual Composer) and Ultimate Addons. Most our buyers agree that The7 is the best theme to be used with these plugins, up to date!
          Its 1000+ Theme Options allows to craft almost any imaginable design. And Design Wizard feature lets you create a boutique-grade website design in mere minutes.
          Both Wizard and advanced Theme Options can work in visual WP Theme Customizer-like and old-school backend editing modes.
          The7 comes bundled with WPBakery Page Builder (formerly Visual Composer), Ultimate Addons, Slider Revolution, The7 Elements, Go Pricing Tables and ConvertPlus. It is also fully compatible with most popular plugins like WooCommerce, WPML, Yoast SEO, All in One WP Migration, W3 Total Cache and many others.
          Compatible with WordPress 5.2, 5.3 and WooCommerce 3.8.
          GDPR ready.
          Full WordPress 5 compatibility.
          Full Elementor compatibility.
          Full WooCommerce compatibility.
          Full Gutenberg compatibility.
          Hidden Content
          Give reaction to this post to see the hidden content.
          Hidden Content
          Give reaction to this post to see the hidden content.
        • By itsMe

          Hidden Content
          Give reaction to this post to see the hidden content. WP Speed of Light is a powerful plugin that speeds up WordPress with technical and advanced features, yet accessible to everyone. WP Speed of Light comes with a cache and Gzip compression system, and includes, a resource minification tool, a database cleanup system, a htaccess optimization tool and an automatic cache cleaner.
          Demo:
           
          Hidden Content
          Give reaction to this post to see the hidden content.
          Hidden Content
          Give reaction to this post to see the hidden content.