74 lines
2.4 KiB
XML
74 lines
2.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<!--
|
|
WPScan - WordPress Security Scanner
|
|
Copyright (C) 2011 Ryan Dewhurst AKA ethicalhack3r
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
ryandewhurst at gmail
|
|
|
|
<hash sha1="">
|
|
<title></title>
|
|
<file></file>
|
|
<reference></reference>
|
|
</hash>
|
|
|
|
PS : Only he following extensions are scanned : js, php, swf, html, htm
|
|
If you want to add one, modify the variable file_extension_to_scan, line 191 in wpstools.rb
|
|
|
|
-->
|
|
|
|
<hashes>
|
|
|
|
<hash sha1="17c372678aafb3bc1a7b37320b5cc1d8af433527">
|
|
<title>XSS in swfupload.swf</title>
|
|
<file>swfupload.swf</file>
|
|
<reference>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</reference>
|
|
</hash>
|
|
|
|
<hash sha1="775dc1089829ef07838406def28a4d8bfef69d66">
|
|
<title>Arbitrary File Upload Vulnerability</title>
|
|
<file>php.php</file>
|
|
<reference>http://packetstormsecurity.com/files/119241/wpvalums-shell.txt</reference>
|
|
</hash>
|
|
|
|
<!-- This one a is the same as above, but the postSize verification has been removed -->
|
|
<hash sha1="5e8f0d5a917d2937318a9bafd0529135bd473e70">
|
|
<title>Arbitrary File Upload Vulnerability</title>
|
|
<file>php.php</file>
|
|
<reference>http://packetstormsecurity.com/files/119218/wpreflexgallery-shell.txt</reference>
|
|
</hash>
|
|
|
|
<hash sha1="3f9ad05b05b65ee2b6efa1373f708293dd2005c7">
|
|
<title>Arbitrary File Upload Vulnerability</title>
|
|
<file>uploadify.php</file>
|
|
<reference>http://packetstormsecurity.com/files/119219/wpuploader104-shell.txt</reference>
|
|
</hash>
|
|
|
|
<hash sha1="ac638cc38f011b74a8d9a4e7d3d60358e472166c">
|
|
<title>Inline phpinfo()</title>
|
|
<file>phpinfo.php</file>
|
|
<reference></reference>
|
|
</hash>
|
|
|
|
<hash sha1="012ee25cceff745e681fbb3697a06f3712f55554">
|
|
<title>phpinfo()</title>
|
|
<file>phpinfo.php</file>
|
|
<reference></reference>
|
|
</hash>
|
|
|
|
</hashes>
|
|
|