# Author => Zikou-16
# Download plugin : http://wordpress.org/extend/plugins/slidedeck2/

#=> Exploit Info :
------------------
# The attacker can inject HTML codes & inject a simple file uploader to upload shell
------------------

------------------
#=> XSS
------------------
http://[target]/[path]/wp-content/plugins/slidedeck2-pro/js/zeroclipboard/test.html

inj3ct u'r HTML codes in (Text) then click Copy To Clipboard... 

screenshot #=> http://i49.tinypic.com/1zgqngx.png

------------------
#=> Shell Upload
------------------

http://[target]/[path]/wp-content/plugins/slidedeck2-pro/js/zeroclipboard/test.html

inj3ct u'r simple file uploader & upload u'r shell

screenshot #=> http://i45.tinypic.com/1426mhg.jpg

------------------
#=> Demos 
------------------

http://thevillagevenue.com/wordpress/wp-content/plugins/slidedeck2-pro/js/zeroclipboard/test.html

http://dreamland.com.pk/wp-content/plugins/slidedeck2-pro/js/zeroclipboard/test.html

http://oldsouthpawn.com/wp-content/plugins/slidedeck2-pro/js/zeroclipboard/test.html