Sploitus

Exploit for BackWPup < 4.0.4 - Unauthenticated Backup Download

CVE-2023-7164

wpexploit · 2024-03-18

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:79B07F37-2C6B-4846-BB28-91A1E5BF112E
1) Ensure that Apache is configured with the ability to list directory content.
2) When this is done, you can see the backup directory.
3) When the backup is in progress, you can access the backup at: http://your_site/wordpress/wp-content/uploads/backwpup-{hash}-temp/db.sql