cve/2018/CVE-2018-9118.md

CVE-2018-9118

Description

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.

POC

Reference

• https://wpvulndb.com/vulnerabilities/9056
• https://wpvulndb.com/vulnerabilities/9056
• https://www.exploit-db.com/exploits/44417/
• https://www.exploit-db.com/exploits/44417/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates