CVE-2012-3576

This exploit demonstrates an arbitrary file upload vulnerability in wpStoreCart WordPress plugin versions 2.5.27-2.5.29. It uses cURL to upload a malicious PHP file (lo.php) to the vulnerable endpoint, achieving remote code execution.

This is a bash script that exploits an arbitrary file upload vulnerability in the wpStoreCart WordPress plugin before version 2.5.30 (CVE-2012-3576). It sends a POST request to upload a file to the vulnerable endpoint and checks for a successful response.