User: Password:
|
|
Subscribe / Log in / New account

wordpress: cross-site scripting

Package(s):wordpress CVE #(s):CVE-2007-1049
Created:March 5, 2007 Updated:March 21, 2007
Description: A Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable.
Alerts:
Gentoo 200703-23 wordpress 2007-03-20
Debian-Testing DTSA-34-1 wordpress 2007-03-03

(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds