[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities
- To: Amir@xxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities
- From: Henri Salo <henri@xxxxxxx>
- Date: Tue, 17 Apr 2012 10:25:35 +0300
On Wed, Nov 30, 2011 at 03:23:16PM +0000, Amir@xxxxxxxx wrote:
> a bug in Wordpress 1-jquery-photo-gallery-slideshow-flash plugin that allows
> to us to occur a Cross-Site Scripting on a Remote machin.
>
>
>
>
>
> ############################################################################################################################################
> #
> #
> # Islamic Republic Of Iran Security Team
> #
> #
> #
> # http://irist.ir/forum/
> #
> #
> #
> ############################################################################################################################################
> #
> #
> # Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site
> Scripting Vulnerabilities #
> #
> #
> # Download......:
> http://wordpress.org/extend/plugins/1-jquery-photo-gallery-slideshow-flash/
> #
> #
> #
> # Exploit.......:
> http://www.site.com/[path]/wp-content/plugins/1-jquery-photo-gallery-slideshow-flash/wp-1pluginjquery.php?page=[xss]
> #
> #
> #
> # Google Search.: "Powered by Wordpress"
> #
> #
> #
> ############################################################################################################################################
> #
> #
> # Bug Found.....: IrIsT.Ir
> #
> #
> #
> # discovery.....: Am!r (IrIsT?)
> #
> #
> #
> # contact.......: Amir[at]IrIsT.ir
> #
> #
> #
> # SP TNX........: The-0utl4w & A.u.r.A & B3HZ4D & m3hdi & joker_s & all IrIsT
> And Aria-security members #
> #
> #
> # & Ashiyane.Org & black-hg.org & Aria-security.com & H4ckcity.Org &
> sepehr-Team.Org & ajaxtm.com & All Iranian Team #
> #
> #
> ############################################################################################################################################
In which version did you test this? Your exploit gives me again:
mod_fcgid: stderr: PHP Fatal error: Call to undefined function add_action() in
<snip>/wp-content/plugins/1-jquery-photo-gallery-slideshow-flash/wp-1pluginjquery.php
on line 43
- Henri Salo