Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-4915.
PoCs published by Metasploit, Charlie Eriksen, including Metasploit module exploits/unix/webapp/wp_google_document_embedder_exec.
AI-analyzed exploit summary This exploit targets a file disclosure vulnerability in the WordPress Google Document Embedder plugin (CVE-2012-4915) to retrieve database credentials, modify admin passwords, and inject a PHP backdoor into a theme file for remote code execution.
Description
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.
Exploits (2)
This exploit targets a file disclosure vulnerability in the WordPress Google Document Embedder plugin (CVE-2012-4915) to retrieve database credentials, modify admin passwords, and inject a PHP backdoor into a theme file for remote code execution.
This Metasploit module exploits an arbitrary file disclosure vulnerability in the WordPress Google Document Embedder plugin (CVE-2012-4915) to leak database credentials, modify admin passwords, and achieve remote code execution by injecting PHP payloads into theme files.