WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting

Exploit Database
20 阅读

作者： Scott Herbert

日期： 2012-09-26
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/37896/

source: https://www.securityfocus.com/bid/55689/info

The ABC Test plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

ABC Test 0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/blog/wp-admin/admin.php?page=abctest&do=edit&id=%22%3E%3Ch1 %3EXSS%3C/h1

last Exploits
WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting的更多信息

Fortinet FortiWeb Web Application Firewall – Policy Bypass：
MyJobList 0.1.3 – ‘eid’ SQL Injection：
Setelsa Conacwin 3.7.1.2 – Local File Inclusion：
Max’s Photo Album – Arbitrary File Upload：
Joomla! Plugin NoNumber Framework – Multiple Vulnerabilities：
Istgah For Centerhost – ‘view_ad.php’ Cross-Site Scripting：
PHP Image Database – Multiple Vulnerabilities：
Ovidentia absences Module 2.64 – Remote File Inclusion：