CVE-2007-2714

Akismet WordPress Plugin <2.0.2 akismet.php - Unspecified Vulnerability

Title source: manual

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2714. PoCs published by David Kierznowski.

AI-analyzed exploit summary This exploit leverages a cross-site scripting (XSS) vulnerability in the WordPress Akismet plugin by injecting malicious JavaScript via the '_wp_http_referer' parameter. The payload executes an alert with the document cookie, demonstrating the vulnerability.

Description

Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors.

Exploits (1)

exploitdb WORKING POC VERIFIED

by David Kierznowski · htmlwebappsphp

https://www.exploit-db.com/exploits/30036

View Code ZIP pw:eip

This exploit leverages a cross-site scripting (XSS) vulnerability in the WordPress Akismet plugin by injecting malicious JavaScript via the '_wp_http_referer' parameter. The payload executes an alert with the document cookie, demonstrating the vulnerability.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: WordPress Akismet plugin (version unspecified, likely older versions)

Auth required

Prerequisites: Access to a WordPress admin session with the ability to submit the form · Akismet plugin installed and vulnerable version in use

MITRE ATT&CK