WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability

No description provided by source. An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI. The following proof of concept is available: curl -H "Cookie: my cookies here" -H "Host: body onload=alertString.fromCharCode88,83,83"...

WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' CSS

Exploit for unknown platform in category web applications ================================================================================ WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability...

CVE-2009-1030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the chooseprimaryblog function in wp-includes/wpmu-functions.php in WordPress MU WPMU before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...

WordPress MU wp-includes/wpmu-functions.php模块跨站脚本漏洞

BUGTRAQ ID: 34075 WordPress MU允许在单个wordpress安装上运行多个博客。 WordPress MU的chooseprimaryblog函数没有正确地过滤Host头。以下是wp-includes/wpmu-functions.php中的有漏洞代码段： 1830 function chooseprimaryblog 1831 global $currentuser; 1832 ? 1833 table class="form-table" 1834 tr 1835 th scope="row"?php e'Primary Blog'; ?/th 1836 ...