CVE-2007-4893

Опубликовано: 14 сент. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field.

Комментарий

There is an input validation error in the wp-admin/admin-functions.php script when processing the no_filter parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01395

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2007-4893

ubuntu

почти 18 лет назад

CVE-2007-4893

debian

почти 18 лет назад

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress m ...

GHSA-hm63-rvp6-rvmj

github

больше 3 лет назад

EPSS

Процентиль: 80%

0.01395

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-352