Lucene search
PRIOn knowledge basePRION:CVE-2007-4139HistoryAug 03, 2007 - 10:17 a.m.
Cross site scripting
2007-08-0310:17:00
PRIOn knowledge base
www.prio-n.com
3
Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.
References
mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/
osvdb.org/36621
secunia.com/advisories/26296
trac.wordpress.org/attachment/ticket/4689/4689.diff
trac.wordpress.org/ticket/4689
www.securityfocus.com/bid/25158
www.vupen.com/english/advisories/2007/2744
exchange.xforce.ibmcloud.com/vulnerabilities/35718
Related
fedora
fedora
[SECURITY] Fedora 7 Update: wordpress-2.2.2-0.fc7
2007-08-29 17:27:09
openvas
openvas
Fedora Update for wordpress FEDORA-2007-1885
2009-02-27 00:00:00
Fedora Update for wordpress FEDORA-2007-1885
2009-02-27 00:00:00
nvd
nvd
CVE-2007-4139
2007-08-03 10:17:00
patchstack
patchstack
WordPress <= 2.2.1 - XSS
2007-08-02 00:00:00
cve
cve
CVE-2007-4139
2007-08-03 10:17:00
redhatcve
redhatcve
CVE-2007-4139
2019-10-04 20:47:30
cvelist
cvelist
CVE-2007-4139
2007-08-03 10:00:00
nessus
nessus
Fedora 7 : wordpress-2.2.2-0.fc7 (2007-1885)
2007-11-06 00:00:00