Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)

Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 10 : wordpress-mu-2.6.5-2.fc10 (2009-3474)

Tue Apr 7 2009 Bret McMillan - 2.6.5-2 - Patch for CVE-2009-1030 - Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network...

Fedora Core 10 FEDORA-2009-3474 (wordpress-mu)

The remote host is missing an update to wordpress-mu announced via advisory FEDORA-2009-3474. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Fedora Core 10 FEDORA-2009-3474 (wordpress-mu)

The remote host is missing an update to wordpress-mu announced via advisory FEDORA-2009-3474. OpenVAS Vulnerability Test $Id: fcore20093474.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3474 wordpress-mu Authors: Thomas Reinke Copyright: Copyright...

[SECURITY] Fedora 10 Update: wordpress-mu-2.6.5-2.fc10

WordPress-MU is a derivative of the WordPress blogging codebase, to allow one instance to serve multiple users...

CVE-2009-1030

Cross-site scripting XSS vulnerability in the chooseprimaryblog function in wp-includes/wpmu-functions.php in WordPress MU WPMU before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...

Cross site scripting

Cross-site scripting XSS vulnerability in the chooseprimaryblog function in wp-includes/wpmu-functions.php in WordPress MU WPMU before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...

CVE-2009-1030

Technical details about CVE-2009-1030 are not provided in the attached documents. Monitor for updates from vendors and security advisories.

WordPress MU wp-includes/wpmu-functions.php模块跨站脚本漏洞

BUGTRAQ ID: 34075 WordPress MU允许在单个wordpress安装上运行多个博客。 WordPress MU的chooseprimaryblog函数没有正确地过滤Host头。以下是wp-includes/wpmu-functions.php中的有漏洞代码段： 1830 function chooseprimaryblog 1831 global $currentuser; 1832 ? 1833 table class="form-table" 1834 tr 1835 th scope="row"?php e'Primary Blog'; ?/th 1836 ...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored...

WordPress MU 2.7 - HOST HTTP Header Cross-Site Scripting

WordPress MU 2.7 - HOST HTTP Header Cross-Site Scripting ============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored...

WordPress MU Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Fedora Update for wordpress-mu FEDORA-2008-11104

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for wordpress-mu FEDORA-2008-11104

Check for the Version of wordpress-mu OpenVAS Vulnerability Test Fedora Update for wordpress-mu FEDORA-2008-11104 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 10 Update: wordpress-mu-2.6.5-1.fc10

WordPress-MU is a derivative of the WordPress blogging codebase, to allow one instance to serve multiple users...

DEBIAN-CVE-2008-5695

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

CVE-2008-5695

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

FreeBSD Ports: wordpress, de-wordpress, wordpress-mu

The remote host is missing an update to the system as announced in the referenced advisory. VID 622bc638-be27-11dd-a578-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 622bc638-be27-11dd-a578-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...