WordPress Plugin WP Cleanfix – Cross-Site Request Forgery

Exploit Database
124 阅读

作者： Enigma Ideas

日期： 2013-05-16
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/38520/

source: https://www.securityfocus.com/bid/59940/info

The WP cleanfix plugin for WordPress is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

WP cleanfix 2.4.4 is vulnerable; other versions may also be affected.

SRF PoC - generated by Burp Suite Professional -->

<body>

</form>

</body>

</html>

last Exploits
WordPress Plugin WP Cleanfix – Cross-Site Request Forgery的更多信息

Movable Type 7 r.5002 – XMLRPC API OS Command Injection (Metasploit)：
vBulletin 3.5.2 – Cross-Site Scripting：
Oracle WebLogic – POST Session Fixation：
BlogCFC 5.9.6.001 – Multiple Cross-Site Scripting Vulnerabilities：
Blogman 0.7.1 – ‘profile.php’ SQL Injection：
elaniin CMS – Authentication Bypass：
Joomla! Component Smart Shoutbox 3.0.0 – SQL Injection：
Feng Office 3.7.0.5 – Remote Command Execution (Metasploit)：