[SECURITY] [DLA 1075-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u16 CVE ID : CVE-2017-9066 Debian Bug : 862816 In WordPress, there is insufficient redirect validation in the HTTP class, leading to SSRF. For Debian 7 "Wheezy", these problems have been fixed in version 3.6.1+dfsg-1deb7u16. We recommend that you...

Fedora 26 : wordpress (2017-fe7c3c9c30)

WordPress 4.7.5 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.7.4 and earlier are affected by six security issues : - Insufficient redirect validation in the HTTP class. Reported by Ronni...

Input validation

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

CVE-2017-9066

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

CVE-2017-9066

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

DEBIAN-CVE-2017-9066

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

CVE-2017-9066

CVE-2017-9066 affects WordPress prior to 4.7.5. The issue is insufficient redirect validation in the WordPress HTTP class WP_Http::request(), enabling SSRF via crafted redirects. Impact is described as HIGH for integrity/availability in CVSS terms, with exploitation possible over network and no u...

CVE-2017-9066

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

CVE-2017-9066

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

PT-2017-18682

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.5 Description The issue is related to insufficient redirect validation in the HTTP class, which can lead to Server-Side Request Forgery SSRF. Recommendations For versions prior to 4.7.5, update to version 4.7.5 ...

CVE-2017-9066: Server-Side Request Forgery (SSRF)

In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF...

hlstats-sql.txt

Hlstats is more than 5 years old. HLstats has been downloaded more than 270,000 from http://sf.net. Nothing more than absolutely benign XSS has been reported for this application, until NOW. Merry Christmass, --Michael Brooks Homepage: http://sourceforge.net/projects/hlstats/ -----BEGIN PGP SIGNE...

HLStats 1.34 - 'hlstats.php' SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...