WordPress Platform Theme File Upload Vulnerability
The WordPress Theme "platform" contains a remote code execution vulnerability through an unchecked admin_init call. The theme includes the uploaded file from its temp filename with php's include function.
Module Name
exploit/unix/webapp/wp_platform_exec
Authors
- Marc-Alexandre Montpas
- Christian Mehlmauer <FireFart [at] gmail.com>
References
Targets
- platform < 1.4.4, platform pro < 1.6.2
Platforms
- php
Architectures
- php
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/unix/webapp/wp_platform_exec
msf exploit(wp_platform_exec) > show targets
...targets...
msf exploit(wp_platform_exec) > set TARGET <target-id>
msf exploit(wp_platform_exec) > show options
...show and set options...
msf exploit(wp_platform_exec) > exploit