CVE-2012-4915

Related Files

WordPress Google Document Embedder Arbitrary File Disclosure

Posted Jan 8, 2013

Authored by Charlie Eriksen | Site metasploit.com

This Metasploit module exploits an arbitrary file disclosure flaw in the WordPress blogging software plugin known as Google Document Embedder. The vulnerability allows for database credential disclosure via the /libs/pdf.php script. The Google Document Embedder plug-in versions 2.4.6 and below are vulnerable. This exploit only works when the MySQL server is exposed on a accessible IP and Wordpress has filesystem write access. Please note: The admin password may get changed if the exploit does not run to the end.

tags | exploit, arbitrary, php

advisories | CVE-2012-4915, OSVDB-88891

SHA-256 | d86ee12abd38355eaa0ede874337844297f09019b89cae1d861c414675387207

Download | Favorite | View