CVE-2016-10924 PoC — WordPress ebook-download插件路径遍历漏洞

Source

https://github.com/LGenAgul/Wordpress-ebook-CVE-2016-10924

Associated Vulnerability

Title: WordPress ebook-download插件路径遍历漏洞 (CVE-2016-10924)
Description:The ebook-download plugin before 1.2 for WordPress has directory traversal.

Readme

Wordpress eBook Download 1.1 plugin has a file disclosure vulnerability by abusing it's get parameter in the filedownload.php file.
This script brute forces different processes on the server using this vulnerability.

USAGE: python pidbrute.py <IPADDRESS>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →