CVE-2014-4940

This exploit demonstrates a local file inclusion vulnerability in the Tera Charts WordPress plugin. By manipulating the 'fn' parameter, an attacker can read arbitrary files on the server, such as '/etc/passwd'.

This exploit demonstrates a local file inclusion (LFI) vulnerability in the Tera Charts WordPress plugin. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'fn' parameter in the 'treemap.php' script.