CVE-2012-6506

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities2012-04-26 · webapps · php · Verified

Impact

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop
• http://secunia.com/advisories/48991
• http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/
• http://www.exploit-db.com/exploits/18787
• http://www.osvdb.org/81492
• http://www.osvdb.org/81493
• http://www.securityfocus.com/bid/53278
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75179
• http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop
• http://secunia.com/advisories/48991
• http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/
• http://www.exploit-db.com/exploits/18787
• http://www.osvdb.org/81492
• http://www.osvdb.org/81493
• http://www.securityfocus.com/bid/53278
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75179