.. / CVE-2015-20067

• Access Control
• Nuclei
• Web

Exploit for WP Attachment Export < 0.2.4 - Unrestricted File Download (CVE-2015-20067)

Description:

The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed in plain text.

Nuclei Template

View the template here CVE-2015-20067.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-20067.yaml

References: