Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2015-6668 — Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3 | Kitploit
Tools/GitHubGitHub/jimdiroffii/cve-2015-6668
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubjimdiroffii/cve-2015-6668

CVE-2015-6668

Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2015-6668

Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3

Exploits IDOR vulnerability in Job Manager plugin for Wordpress.

Tested on Python 3.11.9

References

NIST CVE WPScan Vuln DB

Setup and Usage

Clone the repo, setup virtual environment (if desired), install requests, and run the script with Python 3.

Clone

root@kitploit:~
git clone https://github.com/jimdiroffii/CVE-2015-6668.git
cd CVE-2015-6668

Python Virtual Environment (optional)

root@kitploit:~
python3 -m venv .venv
Download Tool
  • Bash
root@kitploit:~
source .venv/bin/activate
  • Powershell
root@kitploit:~
.\.venv\Scripts\activate

Install requests

root@kitploit:~
python3 -m pip install requests

Run exploit.py

root@kitploit:~
python3 ./exploit.py

Output

root@kitploit:~
$ python3 ./exploit.py
CVE-2015-6668
Title: CV filename disclosure on Job-Manager WP Plugin
Author: Evangelos Mourikis
Blog: https://vagmour.eu
Plugin URL: http://www.wp-jobmanager.com
Versions: <=0.7.25

Enter a vulnerable website: http://10.10.10.10
Enter a file name: HackerAccessGranted
[+] URL of CV found! http://10.10.10.10/wp-content/uploads/2017/04/HackerAccessGranted.jpg