CVE-2017-1000170

This exploit demonstrates a path traversal vulnerability in the WordPress Plugin Delightful Downloads Jquery File Tree (version <=1.6.6). It sends a POST request with a manipulated 'dir' parameter to traverse directories and access sensitive files.

This repository contains a functional exploit for CVE-2017-1000170, a path traversal vulnerability in jQuery File Tree versions <1.6.6. The exploit allows an attacker to list readable files and directories on the server by sending crafted requests to the vulnerable endpoint.