43 lines
No EOL
1.2 KiB
Text
43 lines
No EOL
1.2 KiB
Text
###################################################################################
|
|
|
|
# Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability
|
|
#
|
|
# Google Dork:inurl:/wp-content/plugins/count-per-day
|
|
#
|
|
# Date: 08/24/2012
|
|
#
|
|
# Author: Crim3R
|
|
#
|
|
# Version 3.2.3
|
|
#
|
|
# Vendor Home : http://downloads.wordpress.org/plugin/count-per-day.3.2.3.zip
|
|
#
|
|
# Tested on: all
|
|
#
|
|
###################################################################################
|
|
|
|
$
|
|
$ Author will be not responsible for any damage.
|
|
$
|
|
###################################################################################
|
|
|
|
|
|
========================================
|
|
first notes.php is not restricted to admin and anyone can access it directty by
|
|
browser => an attacker can add notes witch
|
|
|
|
can be html codes => its Stored Xss
|
|
goto WP-path/wp-content/plugins/count-per-day/notes.php
|
|
in the notes section add html code and click Add
|
|
D3M0 :
|
|
http://www.christinedesavino.com/blog/wp-content/plugins/count-per-day
|
|
|
|
http://www.dhakadakshinghsc.com/wp-content/plugins/count-per-day/
|
|
|
|
www.watansport.net/ara/wp-content/plugins/count-per-day/
|
|
|
|
|
|
===============Crim3R@Att.Net===========
|
|
|
|
$home = %00
|
|
thanks to : 2MzRp - Mikili - 0x0ptim0us - iC0d3R - farbodmahini & Amir |