WordPress Responsive Thumbnail Slider Plugin 1.0 - Arbitrary File Upload

[Mr.XpR]

[align=center]


[/align]

# Intrduction :
 
# Wordpress Responsive Thumbnail Slider Plugin iS A With 6000+ Active
Install
# And Suffer From A File Upload Vulnerability Allow Attacker Upload Shell
As A Image .
# Authors , Editors And Of Course Administrators This Vulnerability To Harm
WebSite .
 
# POC :
 
# For Exploiting This Vulnerability :
 
# Go To Add Image Section And Upload File By Self Plugin Uploader
# Then Upload File With Double Extension Image
# And By Using A BurpSuite Or Tamper Data Change The File Name From
Shell.php.jpg To Shell.php
# And Shell Is Uploaded . :)