Shopp Plugin for WordPress Multiple Security Vulnerabilities

vendor:

Shopp Plugin for WordPress

by:

SecurityFocus

7,5

CVSS

HIGH

Cross-Site Scripting (XSS)

CWE

Product Name: Shopp Plugin for WordPress

Affected Version From: 1.0.17

Affected Version To: 1.0.17

Patch Exists: YES

Related CWE: N/A

CPE: a:shopp:shopp

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2012

Shopp Plugin for WordPress Multiple Security Vulnerabilities

The Shopp plugin for WordPress is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attackers can exploit these issues to disclose sensitive information, steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the web server, and launch other attacks.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to dynamically generate web content.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/55817/info

The Shopp plugin for WordPress is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attackers can exploit these issues to disclose sensitive information, steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the web server, and launch other attacks.

Shopp 1.0.17 is vulnerable; other versions may also be affected.

http://www.example.com/Shopp_v1.0.17/core/ui/behaviors/swfupload/swfupload.swf?movieName="]);}catch(e){}if(!self.a)self.a=!alert("xSS");//
http://www.example.com/Shopp_v1.0.17/core/ui/behaviors/swfupload/swfupload.swf
http://www.example.com/Shopp_v1.0.17/core/model/schema.sql