.. / CVE-2008-1061

• XSS
• Nuclei
• Web

Exploit for WordPress Sniplets <=1.2.2 - Cross-Site Scripting (CVE-2008-1061)

Description:

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter to view/admin/submenu.php; and via the page parameter to view/admin/pager.php.

Nuclei Template

View the template here CVE-2008-1061.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-1061.yaml

References: