CVE-2024-6460 PoC — WordPress plugin Grow by Tradedoubler 安全漏洞

Description

Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI

介绍

# CVE-2024-6460
Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI

## Usage

   ```bash
usage: CVE-2024-6460.py [-h] -u URL -U USERNAME -P PASSWORD [-c COMPONENT]

Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target WordPress site URL (e.g., http://example.com)
  -U USERNAME, --username USERNAME
                        WordPress username
  -P PASSWORD, --password PASSWORD
                        WordPress password
  -c COMPONENT, --component COMPONENT
                        Path to the target file (default: wp-config.php)

文件快照

备注