Wordpress Plugins - my-link-order Full Path Disclosure Vulnerability

# Souhail Hammou - Independant Security Researcher & Penetration Tester .
# Website : www.dark-puzzle.com
# Facebook : www.facebook.com/dark.puzzle.sec
# Youtube : http://www.youtube.com/user/mariotrey
# E-mail   : [email protected]
# Greetings to all moroccan researchers and white hats .

FULL PATH DISCLOSURE Vulnerability :
========================

This plugin is prone to a full path disclosure vulnerability that can be exploited by opening the ERROR_LOG file that has public reading rights including the full path .

Live Examples : 

http://jade-carvers.com/wp-content/plugins/my-link-order/error_log
http://crmweblog.crmmastery.com/wp-content/plugins/my-link-order/error_log
http://www.justreid.com/wp-content/plugins/my-link-order/error_log
http://wiannoassociates.com/blog/wp-content/plugins/my-link-order/error_log

Directory Listing Vulnerability :
====================

In addition , this plugin is also vulnerable to a directory listing Vulnerability , Allowing the attacker to list the files and carry E-Mails , that can be used for a social engineering attack .

Live Examples :

http://wiannoassociates.com/blog/wp-content/plugins/my-link-order/
http://www.msg2act.com/nextgenphysics/wp-content/plugins/my-link-order/
http://www.sphericalpanoramas.com/blog/wp-content/plugins/my-link-order/

##

#  0day.today [2018-01-03]  #