mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 09:41:05 +00:00
68 lines
3.1 KiB
Markdown
68 lines
3.1 KiB
Markdown
|
### [CVE-2015-3440](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3440)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://packetstormsecurity.com/files/131644/WordPress-4.2-Cross-Site-Scripting.html
|
||
|
|
- http://seclists.org/fulldisclosure/2015/Apr/84
|
||
|
|
- https://klikki.fi/adv/wordpress2.html
|
||
|
|
- https://wpvulndb.com/vulnerabilities/7945
|
||
|
|
- https://www.exploit-db.com/exploits/36844/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/0v3rride/Week-7
|
||
|
|
- https://github.com/AAp04/Codepath-Week-7
|
||
|
|
- https://github.com/AAp04/WordPress-Pen-Testing
|
||
|
|
- https://github.com/ARPSyndicate/cvemon
|
||
|
|
- https://github.com/Afetter618/WordPress-PenTest
|
||
|
|
- https://github.com/Cng000/web_sec_WK7
|
||
|
|
- https://github.com/Daas335b/Codepath.week7
|
||
|
|
- https://github.com/Daas335b/Week-7
|
||
|
|
- https://github.com/DinorahGV02/Codepath_Unit-7-Project-WordPress-vs.-Kali
|
||
|
|
- https://github.com/GianfrancoLeto/CodepathWeek7
|
||
|
|
- https://github.com/JamesNornand/CodePathweek7
|
||
|
|
- https://github.com/KushanSingh/Codepath-Project7
|
||
|
|
- https://github.com/Lukanite/CP_wpvulns
|
||
|
|
- https://github.com/MXia000/WordPress_Pentesting
|
||
|
|
- https://github.com/Rahul150811/Wordpress-vs-Kali
|
||
|
|
- https://github.com/XiaoyanZhang0999/WordPress_presenting
|
||
|
|
- https://github.com/YemiBeshe/Codepath-WP1
|
||
|
|
- https://github.com/alem-m/WordPressVSKali
|
||
|
|
- https://github.com/alvarezpj/websecurity-week7
|
||
|
|
- https://github.com/and-aleksandrov/wordpress
|
||
|
|
- https://github.com/beelzebielsk/csc59938-week-7
|
||
|
|
- https://github.com/cflor510/Wordpress-
|
||
|
|
- https://github.com/choyuansu/Week-7-Project
|
||
|
|
- https://github.com/dayanaclaghorn/codepathWP
|
||
|
|
- https://github.com/dkohli23/WordPressLab7and8
|
||
|
|
- https://github.com/drsh0x2/WebSec-Week7
|
||
|
|
- https://github.com/hpatelcode/codepath-web-security-week-7
|
||
|
|
- https://github.com/j5inc/week7
|
||
|
|
- https://github.com/jk-cybereye/codepath-week7
|
||
|
|
- https://github.com/jlangdev/WPvsKali
|
||
|
|
- https://github.com/joshuamoorexyz/exploits
|
||
|
|
- https://github.com/jr-333/week7
|
||
|
|
- https://github.com/kehcat/CodePath-Fall
|
||
|
|
- https://github.com/kevinsinclair83/Week-7
|
||
|
|
- https://github.com/kjtlgoc/CodePath-Unit-7-8-WordPress-Pentesting
|
||
|
|
- https://github.com/krushang598/Cybersecurity-Week-7-and-8
|
||
|
|
- https://github.com/lqiu1127/Codepath-wordpress-exploits
|
||
|
|
- https://github.com/mattdegroff/CodePath_Wk7
|
||
|
|
- https://github.com/nke5ka/codepathWeek7
|
||
|
|
- https://github.com/notmike/WordPress-Pentesting
|
||
|
|
- https://github.com/oleksandrbi/CodePathweek7
|
||
|
|
- https://github.com/preritpathak/Pentesting-live-targets-2
|
||
|
|
- https://github.com/rlucus/codepath
|
||
|
|
- https://github.com/theawkwardchild/WordPress-Pentesting
|
||
|
|
- https://github.com/zakia00/Week7Lab
|
||
|
|
- https://github.com/zjasonshen/CodepathWebSecurityWeek7
|
||
|
|
- https://github.com/zmh68/codepath-w07
|
||
|
|
|