Main » Articles » Web Hacking » Exploits and Vulenrablities

WordPress tdo Mini (Plugin) ~ File Upload Vulnerability
Title: WordPress tdo Mini (Plugin) ~ File Upload Vulnerability
Author: MaX-HaCker
Today I'll tell you one more file upload vulnerability of Wordpress. This vulnerability occurs in tdo Mini plugin of Wordpress.

Lets Start

First find some vulnerable sites by using Google Dorks
inurl:”plugins/tdo-mini-forms/tdomf-upload-inline.php?tdomf_form_id=1" 
After getting a vulnerable site, upload your file. It would look something like this
To access your uploaded file change the url from
http://www.example.com/wp-content/plugins/tdo-mini-forms/tdomf-upload-inline.php 
to
http://www.example.com/wp-content/uploads/tdomf/tmp/1/

If the site is vulnerable, then it will open something like this
These are the ip addresses, to access your uploaded file click on your ip address. After that it will show your uploaded file like this

Boom! Now you are successfully done. And you can also upload shell by changing the extension of the shell from shell.php to shell.php;.jpg.

Category: Exploits and Vulenrablities | Added by: MaX-HaCker (12.08.25)
Views: 2554 | Comments: 25 | Rating: 5.0/1
Total comments: 6
0  
6 Unpadsede   (12.12.21 6:29 AM) [Entry]
After getting more than 10000 visitors/day to my website I thought your geniushackers.net website also need unstoppable flow of traffic...

Use this BRAND NEW software and get all the traffic for your website you will ever need ...

= = > > http://mass-autopilot-traffic.net

In testing phase it generated 867,981 visitors and $540,340.

Then another $86,299.13 in 90 days to be exact. That's $958.88 a
day!!

And all it took was 10 minutes to set up and run.

But how does it work??

You just configure the system, click the mouse button a few
times, activate the software, copy and paste a few links and
you're done!!

Click the link BELOW as you're about to witness a software that
could be a MAJOR turning point to your success.

= = > > http://mass-autopilot-traffic.net

0  
5 FutLastysaw   (12.12.10 1:28 AM) [Entry]
Earn up to $265 within next 12H Answering Simple Surveys
Hi geniushackers.net admin just wanted to let you know

There's an incredible new opportunity
that just grabbed my attention!

It's almost too good to be true. Big
companies are paying people just for giving
their opinions! I can't believe this guy and others are cashing out money just for filling out simple surveys read here how they are doing this:

http://earn-money-with-surveys.com

That's right! I'm not kidding, all you've got
to do is complete simple surveys and these
companies will pay you fat cash for it and it does not mater form which country you are, they need people from all over world!

You've got to see this.

http://earn-money-with-surveys.com

But the truth is... they're not letting
very many people join the program so
you've got to hurry!

See you there!
Jack

0  
4 pamperbtaurge   (12.11.23 9:43 PM) [Entry]
Hey I just realized that your site geniushackers.net website could deal with a massive boost in the search engine rankings…

And get massive free, targeted traffic

Just with simple wordpress seo plugin - on complete autopilot...

See how website after installing this plugin getting 55000 visitors per month....

http://wp-auto-traffic-plugin.com

I just noticed your site is on wordpress and though I’d share something with you what helped me to skyrocket my wordpress site traffic…

…you see, I’m a website owner like you who builds his sites on wordpress and I found this little plugin that seriously increases your website search engine rankings.

You can see proof what #1 rankings it did for me here:

http://wp-auto-traffic-plugin.com

You’ll see on the page above that I’ve used the plugin to get some pretty impressive search engine rankings, rankings which I’m sure you could get for your geniushackers.net wesbite

So check out the plugin now and let me know how it goes

http://wp-auto-traffic-plugin.com

Regards, Christine

0  
3 MugMouraloNug   (12.11.14 6:31 PM) [Entry]
After getting more than 10000 visitors/day to my website I thought your geniushackers.net website also need unstoppable flow of traffic...

Use this BRAND NEW software and get all the traffic for your website you will ever need ...

= = > > http://mass-autopilot-traffic.com

In testing phase it generated 867,981 visitors and $540,340.

Then another $86,299.13 in 90 days to be exact. That's $958.88 a
day!!

And all it took was 10 minutes to set up and run.

But how does it work??

You just configure the system, click the mouse button a few
times, activate the software, copy and paste a few links and
you're done!!

Click the link BELOW as you're about to witness a software that
could be a MAJOR turning point to your success.

= = > > http://mass-autopilot-traffic.com

0  
2 gomaFoetleMag   (12.11.10 11:57 AM) [Entry]
What if there was a way to get thousands of visitors a day to your geniushackers.net website and make $144,000 in one month
with:

* No prior experience
* No SEO or tech experience
* No selling or cold calling
* No substantial investments in advertising or marketing

Sounds crazy, but it's true, and here's proof:

http://massive-fb-traffic.com

I don't know how long this system is going to be up, but you
owe it to yourself to check it out...

http://massive-fb-traffic.com

It will just take a minute, and it could change your life
for the better!

http://massive-fb-traffic.com

Best Regards,
Chris

0  
1 KiskjuscucH   (12.11.04 3:24 AM) [Entry]
Would you like to discover the secret how I’ve achieved multiple number 1 ranking positions for my wordpress website with simple seo plugin without being affected by any Google Updates?

And how you can get same results for your geniushackers.net wordpress site and finally start to get tons of laser targeted traffic from search engines and get lot more sales...

I’ve set up a webpage where you can see my results (they’re impressive) and discover how I did it all here:

http://best-wp-seo-plugin.com

Now it’s important to note it’s got nothing to do with directories or article marketing or link building.

It’s just a simple plugin I used on my site, one which you can use on your geniushackers.net website to help boost your rankings as well.

Find out more here:

http://best-wp-seo-plugin.com

Only registered users can add comments.
[ Registration | Login ]
Recommend on Google

Designed By [#]./3X3.R()()T
Like Us on Facebook Follow Us on Twitter Subscribe Us on Youtube WWW.GeniusHackers.NET © 2024
Founder and CEO of GeniusHackers [#] /3x3.R()()T
Hosted by uCoz
Hosted by uCoz