WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting

Exploit Database
131 阅读

作者： Am!r

日期： 2011-11-17
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/36317/

source: https://www.securityfocus.com/bid/50719/info

Flexible Custom Post Type plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/wp-content/plugins/flexible-custom-post-type/edit-post.php?id=[xss]

last Exploits
WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting的更多信息

AlegroCart 1.2.8 – Multiple SQL Injections：
Erolife AjxGaleri VT – Database Disclosure：
Social Oauth Login PHP – Authentication Bypass：
Free Realty 3.1-0.6 – Multiple Vulnerabilities：
DornCMS Application 1.4 – Multiple Web Vulnerabilities：
Abantecart v1.3.2 – Authenticated Remote Code Execution：
Yacht Listing Script 2.0 – SQL Injection：
Gila CMS < 1.11.1 - Local File Inclusion：