Wordpress fckeditor upload Vunerablity : Upload Your Deface Remotly

This Method also Known as Open Cart OpenCart CMS (Web shop) Exploit, Its a old Vunerablity but many pepoles don't know this

1- open Google.com and enter Dork:

Code:

inurl:admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

or

Code:

nurl:Powered By OpenCart

You'll Got a lot of websites by google, select anyone ... For Example i got this one

[You must be registered and logged in to see this link.]

Then i'll will simply add the vuln URL after the website

Ex:

Code:

http://www.schoolshopper.com.au/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

(The path May be chnaged in other Website , Example site.com/abc/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html)

Now a Page will be open Like This:

[You must be registered and logged in to see this image.]

Now See The connector option which is on top left side on page, Change The Connector into PHP (see the Image below)

[You must be registered and logged in to see this image.]

and Now see file upload option and upload your deface or shell

and for checking shell or deface check this url

[You must be registered and logged in to see this link.] or [You must be registered and logged in to see this link.]

Enjoy Hacking!