API tools faq
paste
KingSkrupellos

WordPress 5.1.1 Green_Farming_New Themes File Download

KingSkrupellos
Mar 18th, 2019
112
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.80 KB | None | 0 0
raw download clone embed print report
  1. ############################################################################################
  2.  
  3. # Exploit Title : WordPress 5.1.1 Green_Farming_New Themes Arbitrary File Download
  4. # Author [ Discovered By ] : KingSkrupellos
  5. # Team : Cyberizm Digital Security Army
  6. # Date : 18/03/2019
  7. # Vendor Homepage : wordpress.org ~ greenfarming.in ~ wscubetech.com
  8. # Software Information Link : wscubetech.com/web-development-company-india-about-us.html
  9. greenfarming.in/?page_id=75
  10. # Software Affected Version : 5.1.1
  11. # Tested On : Windows and Linux
  12. # Category : WebApps
  13. # Exploit Risk : Medium
  14. # Google Dorks : inurl:''/wp-content/themes/green_farming_new/"
  15. intext:''Designed & Developed By WsCube Tech''
  16. # Vulnerability Type :
  17. CWE-200 [ Information Exposure ]
  18. CWE-23 [ Relative Path Traversal ]
  19. # PacketStormSecurity : packetstormsecurity.com/files/authors/13968
  20. # CXSecurity : cxsecurity.com/author/KingSkrupellos/1/
  21. # Exploit4Arab : exploit4arab.org/author/351/KingSkrupellos
  22. # Reference Link : cxsecurity.com/issue/WLB-2019030142
  23.  
  24. ############################################################################################
  25. # Information About Software :
  26. ****************************
  27. WsCube Tech is one of the leading Web Design and Development company in jodhpur, India.
  28.  
  29. ############################################################################################
  30.  
  31. # Impact :
  32. ***********
  33. * WordPress 5.1.1 Green_Farming_New is prone to a vulnerability that lets attackers download arbitrary files because the application
  34.  
  35. fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the context of the
  36.  
  37. web server process and obtain potentially sensitive informations. * An information exposure is the intentional or unintentional disclosure
  38.  
  39. of information to an actor that is not explicitly authorized to have access to that information. * The software has Relative Path Traversal
  40.  
  41. vulnerability and it uses external input to construct a pathname that should be within a restricted directory, but it does not
  42.  
  43. properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
  44.  
  45. ############################################################################################
  46.  
  47. # Vulnerable File =>
  48. ******************
  49. /download.php
  50.  
  51. # Vulnerable Parameter =>
  52. ***********************
  53. ?download_file=
  54.  
  55. # Arbitrary File Download Exploit :
  56. ********************************
  57. /wp-content/themes/green_farming_new/download.php?download_file=[FILENAME]
  58.  
  59. ############################################################################################
  60.  
  61. # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
  62.  
  63. ############################################################################################
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!