WordPress Plugin FeedList 2.61.01 – ‘handler_image.php’ Cross-Site Scripting

Exploit Database
109 阅读

作者： John Leitch

日期： 2010-11-08
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/34973/

source: https://www.securityfocus.com/bid/44704/info

The FeedList Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to FeedList 2.61.01 are vulnerable.

http://www.example.com/wordpress/wp-content/plugins/feedlist/handler_image.php?i=%3Cscript%3Ealert(0)%3C/script%3E

last Exploits
WordPress Plugin FeedList 2.61.01 – ‘handler_image.php’ Cross-Site Scripting的更多信息

The Open ISES Project 3.30A – Arbitrary File Download：
PHP Melody 2.7.1 – ‘playlist’ SQL Injection：
Subrion CMS 4.2.1 – Cross-Site Scripting：
WordPress Plugin Spider Catalog 1.4.6 – Multiple Vulnerabilities：
miSecureMessages 4.0.1 – Session Management / Authentication Bypass：
Stark CRM 1.0 – Multiple Vulnerabilities：
Nessus 8.2.1 – Cross-Site Scripting：
PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities：