Bugtraq mailing list archives
Re: Wordpress 1.2.2 is still vulnerable
From: Thomas Waldegger <bugtraq () morph3us org>
Date: 21 Dec 2004 21:56:51 -0000
In-Reply-To: <20041216062119.9218.qmail () www securityfocus com> Sry, but it's getting ridiculous. The new releases of wordpress - 1.2.2 stable and 1.3-alpha-5 unstable - are still vulnerable for some bugs I mentioned in my last message. XSS: /wp-login.php?action=login&redirect_to=[XSS] /wp-admin/templates.php?file=[XSS] /wp-admin/post.php?content=[XSS] SQL Errors: /index.php?m=bla /wp-admin/edit.php?m=bla PHP-Warnings: /wp.php?author=bla /wp-commentsrss2.php?p=999999 /wp-admin/options.php?option_group_id=1888 /wp-admin/post.php?action=edit&post=2890000000000
Current thread:
- Re: Wordpress 1.2.2 is still vulnerable Thomas Waldegger (Dec 21)