.. / CVE-2015-5471

• LFI
• Nuclei
• Web

Exploit for Swim Team <= v1.44.10777 - Local File Inclusion (CVE-2015-5471)

Description:

The program /wp-swimteam/include/user/download.php allows unauthenticated attackers to retrieve arbitrary files from the system.

Nuclei Template

View the template here CVE-2015-5471.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-5471.yaml

References: