WordPress Plugin Gigya Socialize 1.0/1.1.x – Cross-Site Scripting

Exploit Database
16 阅读

作者： MustLive

日期： 2010-06-04
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/34085/

source: https://www.securityfocus.com/bid/40582/info

The Gigya Socialize Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Gigya Socialize 1.1.8 and prior are vulnerable. 

http://www.example.com/?%22%3E%3Cscript%3Ealert(/XSS/)%3C/script%3E

last Exploits
WordPress Plugin Gigya Socialize 1.0/1.1.x – Cross-Site Scripting的更多信息

Elite Bulletin Board 2.1.21 – Multiple SQL Injections：
IPFire 2.21 – Cross-Site Scripting：
WordPress Plugin Count Per Day 3.4 – SQL Injection：
AVideo Platform 8.1 – Cross Site Request Forgery (Password Reset)：
Compro Technology IP Camera – ‘Multiple’ Credential Disclosure：
Monkey CMS – Multiple Vulnerabilities：
Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection：
CMS Made Simple < 2.2.10 - SQL Injection：