CVE-2012-0782

Опубликовано: 30 янв. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Версия до 3.3.1 (включая)

cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.1.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00671

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-0782

ubuntu

больше 13 лет назад

** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance.

CVE-2012-0782

debian

больше 13 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup- ...

GHSA-whf8-2944-v69h

github

около 3 лет назад

EPSS

Процентиль: 70%

0.00671

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79