exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

WordPress RocketTheme Content Spoofing / Cross Site Scripting

WordPress RocketTheme Content Spoofing / Cross Site Scripting
Posted Dec 30, 2012
Authored by MustLive

33 new themes for WordPress that are made by RocketTheme suffer from cross site scripting, path disclosure, and content spoofing vulnerabilities.

tags | exploit, spoof, vulnerability, xss
SHA-256 | b113d5f193f4f8045548d75e1c1eb2e88da81e01e5f5af92b4d2a24021042799

WordPress RocketTheme Content Spoofing / Cross Site Scripting

Change Mirror Download
Hello list!

Earlier I've wrote to the list about multiple vulnerabilities in multiple
themes for WordPress (http://seclists.org/fulldisclosure/2012/Dec/236). In
that later I've mentioned 16 themes by RocketTheme (with Rokbox):
Afterburner, Refraction, Solarsentinel, Mixxmag, Iridium, Infuse,
Perihelion, Replicant2, Affinity, Nexus, Sentinel, Mynxx Vestnikp, Mynxx,
Moxy, Terrantribune, Meridian.

I've wrote about 14 themes + 2 variations of 2 themes by these developers,
but they have 47 themes for WordPress in total. Among them only three are
free, and all other themes from RocketTheme are paid ones (it's needed to
buy subscription to the club to receive access to them). And Rokbox is
bundled with all these themes, except Grunge, which have all
earlier-mentioned vulnerabilities.

So I inform you about multiple vulnerabilities in 33 new themes for
WordPress, which are developed by RocketTheme (Rokbox's developers). These
are Content Spoofing, Cross-Site Scripting, Full path disclosure and
Information Leakage vulnerabilities.

Affected products:

In these 32 themes (in addition to previous 16) there are Cross-Site
Scripting, Content Spoofing, Full path disclosure and Information Leakage
vulnerabilities. And Grunge theme has FPD holes.

These are the next themes by RocketTheme: Voxel, Diametric, Ionosphere,
Clarion, Halcyon, Visage, Enigma, Momentum, Radiance, Camber, Reflex,
Modulus, Nebulae, Entropy, Tachyon, Mercado, Maelstrom, Syndicate, Paradox,
Hybrid, Omnicron, Zephyr, Panacea, Somaxiom, Juxta, Quantive, Crystalline,
Kinetic, Dominion, Reaction, Akiraka, Novus and Grunge.

Affected all versions of these themes for WordPress.

Since August I've informed the developers many times concerning
vulnerabilities in Rokbox and their themes with it.


Content Spoofing (WASC-12):

In parameter file there can be set as video, as audio files.

Swf-file of JW Player accepts arbitrary addresses in parameters file and
image, which allows to spoof content of flash - i.e. by setting addresses of
video (audio) and/or image files from other site.


Content Spoofing (WASC-12):

Swf-file of JW Player accepts arbitrary addresses in parameter config, which
allows to spoof content of flash - i.e. by setting address of config file
from other site (parameters file and image in xml-file accept arbitrary
addresses). For loading of config file from other site it needs to have




Content Spoofing (WASC-12):


XSS (WASC-08):


Full path disclosure (WASC-13):

In all these themes there is FPD in index.php
(http://site/wordpress/wp-content/themes/rt_novus_wp/ and the same for other
themes), which works at default PHP settings. Also potentially there are FPD
in other php-files of these themes.

Information Leakage (WASC-13):

In some themes, similar to rt_mixxmag_wp, there can be error log with full


Best wishes & regards,
Administrator of Websecurity web site

Login or Register to add favorites

File Archive:

June 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    18 Files
  • 2
    Jun 2nd
    13 Files
  • 3
    Jun 3rd
    0 Files
  • 4
    Jun 4th
    0 Files
  • 5
    Jun 5th
    32 Files
  • 6
    Jun 6th
    39 Files
  • 7
    Jun 7th
    22 Files
  • 8
    Jun 8th
    17 Files
  • 9
    Jun 9th
    20 Files
  • 10
    Jun 10th
    0 Files
  • 11
    Jun 11th
    0 Files
  • 12
    Jun 12th
    0 Files
  • 13
    Jun 13th
    0 Files
  • 14
    Jun 14th
    0 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2022 Packet Storm. All rights reserved.

Security Services
Hosting By