.. / CVE-2015-4694

• LFI
• Nuclei
• Web

Exploit for WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval (CVE-2015-4694)

Description:

WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the requested file.

Nuclei Template

View the template here CVE-2015-4694.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-4694.yaml

References: