|
|
| |
|
| |
wordpress: multiple vulnerabilities
| Package(s): | wordpress |
CVE #(s): | CVE-2009-2854
CVE-2009-2851
CVE-2009-2853
|
| Created: | August 24, 2009 |
Updated: | August 28, 2009 |
| Description: |
From the Debian advisory:
CVE-2009-2854:
It was discovered that wordpress lacks authentication checks in various
actions, thus allowing remote attackers to produce unauthorised edits or
additions.
CVE-2009-2851:
It was discovered that the administrator interface is prone to a
cross-site scripting attack.
CVE-2009-2853:
It was discovered that remote attackers can gain privileges via certain
direct requests.
|
| Alerts: |
|
( Log in to post comments)
|
|
|