CVEs-PoC/2015/CVE-2015-4703.md

CVE-2015-4703

Description

Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter.

POC

Reference

• http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html
• https://wpvulndb.com/vulnerabilities/8055

Github

• https://github.com/20142995/nuclei-templates