Bugtraq post 17322

  • Anyone noticed the recent Bugtraq post 17322 by Thomas Waldegger about “Re: WordPress 1.2.2 is still vulnerable”?

    Date: 21 Dec 2004 21:56:51 -0000
    Message-ID: <[email protected]>
    Content-Type: text/plain
    Content-Transfer-Encoding: binary
    MIME-Version: 1.0
    From: Thomas Waldegger <[email protected]>
    To: [email protected]
    Subject: Re: WordPress 1.2.2 is still vulnerable
    In-Reply-To: <[email protected]>
    Sry, but it’s getting ridiculous.
    The new releases of wordpress – 1.2.2 stable and
    1.3-alpha-5 unstable – are still vulnerable for
    some bugs I mentioned in my last message.
    XSS:
    /wp-login.php?action=login&redirect_to=[XSS]
    /wp-admin/templates.php?file=[XSS]
    /wp-admin/post.php?content=[XSS]
    SQL Errors:
    /index.php?m=bla
    /wp-admin/edit.php?m=bla
    PHP-Warnings:
    /wp.php?author=bla
    /wp-commentsrss2.php?p=999999
    /wp-admin/options.php?option_group_id=1888
    /wp-admin/post.php?action=edit&post=2890000000000

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Bugtraq post 17322’ is closed to new replies.