WordPress Plugin WooCommerce 2.0/3.0 - Directory Traversal(CVE-2017-17058)

$woo = "www/wp-content/plugins/woocommerce/templates/emails/plain/"; function filegetcontentsutf8$fn $opts = array 'http' = array 'method'="GET", 'header'="Content-Type: text/html; charset=utf-8" ; $wp = streamcontextcreate$opts; $result = @filegetcontents$fn,false,$wp; return $result; / $head=...

WordPress WooCommerce 2.0/3.0 Plugin - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress woocommerce directory traversal Date: 28-11-2017 Software Link: https://wordpress.org/plugins/woocommerce/ Exploit Author:fu2x2000 Contact: email protected Website: CVE:2017-17058 Version:Tested on WordPress 4.8.3...

WordPress WooCommerce 2.0 / 3.0 Directory Traversal

Exploit Title: WordPress woocommerce directory traversal Date: 28-11-2017 Software Link: https://wordpress.org/plugins/woocommerce/ Exploit Author:fu2x2000 Contact: [email protected] Website: CVE:2017-17058 Version:Tested on WordPress 4.8.3 woocommerce 2.0/3.0 Category: webapps 1. Description...

CVE-2017-17058

CVE-2017-17058 affects the WooCommerce WordPress plugin (versions up to 3.x). The vulnerability is described as a Directory Traversal via the URI /wp-content/plugins/woocommerce/templates/emails/plain/, potentially allowing access to a parent directory. However, multiple sources note that templat...

WordPress Plugin WooCommerce 2.0/3.0 - Directory Traversal

Exploit Title: WordPress woocommerce directory traversal Date: 28-11-2017 Software Link: https://wordpress.org/plugins/woocommerce/ Exploit Author:fu2x2000 Contact: [email protected] Website: CVE:2017-17058 Version:Tested on WordPress 4.8.3 woocommerce 2.0/3.0 Category: webapps 1. Description...

WordPress Plugin WooCommerce 2.03.0 - Directory Traversal

WordPress Plugin WooCommerce 2.03.0 - Directory Traversal Exploit Title: WordPress woocommerce directory traversal Date: 28-11-2017 Software Link: https://wordpress.org/plugins/woocommerce/ Exploit Author:fu2x2000 Contact: [email protected] Website: CVE:2017-17058 Version:Tested on WordPress 4.8...