[fawkes027]

How to exploit this Vulnerability?

# Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability
# Google Dork: inurl:"/wp-content/uploads/userphoto/"
http://www.exploit-db.com/exploits/16181/

[Anima Templi]

It's very semilar or equals to uploading a shell to the website. The shell will then allow you to control the website and possible also the server.

Read about shell uploading and you will get it.

PS. Please make a smaller a smaller subject title next time.

[Vaibs]

How to exploit this Vulnerability?

# Exploit Title: WordPress User Photo Component Remote File Upload Vulnerability
# Google Dork: inurl:"/wp-content/uploads/userphoto/"
http://www.exploit-db.com/exploits/16181/

That is the Dork to lfi vulnerable wp website where you get direct upload page to upload folder.This lfi exist in Wp websites using vulnerable wp plugin.

[fawkes027]

That is the Dork to lfi vulnerable wp website where you get direct upload page to upload folder.This lfi exist in Wp websites using vulnerable wp plugin.

What to do exactly?

[unknownAttacker]

read the description. you need to create fake gif headers and write your backdoor encoded as hex or binary. use hex editor. if you have no idea what I'm talking about, you need to learn some theory: read about binary and hexadecimal data representations, filetypes and how browser interprets them

[dR.0xYw0Rm]

With a little shell uploading knowledge you will be able to perform the attack. Keep in mind that targets vulnerable to Remote File Upload are very hard to find.

[knightserv]

nice but,, more info please.