fcce3705a3
9 changes to exploits/shellcodes WordPress 5.2.3 - Cross-Site Host Modification Dolibarr ERP-CRM 10.0.1 - 'elemid' SQL Injection Enigma NMS 65.0.0 - Cross-Site Request Forgery Enigma NMS 65.0.0 - OS Command Injection Enigma NMS 65.0.0 - SQL Injection Online Appointment - SQL Injection Rifatron Intelligent Digital Security System - 'animate.cgi' Stream Disclosure WordPress Plugin Sell Downloads 1.0.86 - Cross-Site Scripting Dolibarr ERP-CRM 10.0.1 - SQL Injection
17 lines
No EOL
791 B
Text
17 lines
No EOL
791 B
Text
# Exploit Title: WordPress Plugin Sell Downloads 1.0.86 - Cross Site Scripting
|
|
# Exploit Author: Mr Winst0n
|
|
# Author E-mail: manamtabeshekan@gmail.com
|
|
# Discovery Date: September 09,2019
|
|
# Vendor Homepage: https://wordpress.dwbooster.com/content-tools/sell-downloads
|
|
# Software Link : https://wordpress.org/plugins/sell-downloads/
|
|
# Tested Version: 1.0.86
|
|
# Tested on: Parrot OS, Wordpress 5.1.1
|
|
|
|
|
|
# PoC:
|
|
1- Go to "Products for Sale" section
|
|
2- Click on "Add New"
|
|
3- In opend window click on "Add Comment"
|
|
4- Fill comment as "/><img src=x onerror="alert()"> or "/><input type="text" onclick="alert()">
|
|
5- Click on "Publish" (or "Update" if you editing an existing product)
|
|
6- You will see a pop-up (also if click on input), Also if you go to product link will see the pop-up. |