Lucene search
Thomas WaldeggerEDB-ID:24641HistorySep 28, 2004 - 12:00 a.m.
WordPress Core 1.2 - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities
2004-09-2800:00:00
Thomas Waldegger
www.exploit-db.com
27
AI Score
7.4
Confidence
Low
source: https://www.securityfocus.com/bid/11268/info
It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.
Wordpress 1.2 is reported vulnerable, however, other versions may be affected as well.
/wp-login.php?redirect_to=[XSS]
/wp-login.php?mode=bookmarklet&text=[XSS]
/wp-login.php?mode=bookmarklet&popupurl=[XSS]
/wp-login.php?mode=bookmarklet&popuptitle=[XSS]Related
ubuntucve
ubuntucve
CVE-2004-1559
2004-12-31 00:00:00
openvas
openvas
FreeBSD Ports: wordpress
2008-09-04 00:00:00
FreeBSD Ports: wordpress
2008-09-04 00:00:00
exploitdb
exploitdb
cve
cve
CVE-2004-1559
2005-02-20 05:00:00
nessus
nessus
WordPress < 1.5.1 Multiple XSS and SQL Injection Vulnerabilities
2004-12-21 00:00:00
WordPress < 1.2.2 Multiple XSS
2004-09-28 00:00:00
wpvulndb
wpvulndb
WordPress 1.2-1.2.1 - Multiple Cross-Site Scripting (XSS)
2004-12-31 00:00:00
nvd
nvd
CVE-2004-1559
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1559
2005-02-20 05:00:00
debiancve
debiancve
CVE-2004-1559
2005-02-20 05:00:00
patchstack
patchstack
WordPress <=1.2 - Multiple Cross-Site Scripting (XSS) vulnerabilities
2005-02-20 00:00:00