CVE-2014-8799

This exploit demonstrates a path traversal vulnerability in DukaPress 2.5.2, allowing unauthorized access to sensitive files like wp-config.php via a crafted request to dp_image.php.

This Metasploit module exploits a directory traversal vulnerability in the WordPress DukaPress plugin (version <= 2.5.3) to read arbitrary files with web server privileges. It sends a crafted HTTP GET request to the vulnerable endpoint with a traversal payload to access files outside the intended directory.