CVE

Id
24587  
CVE No.
CVE-2007-1230  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242540 24587 CVE-2007-1230 CONFIRM:http://trac.wordpress.org/changeset/4951  View
242541 24587 CVE-2007-1230 CONFIRM:http://trac.wordpress.org/changeset/4952  View
242542 24587 CVE-2007-1230 GENTOO:GLSA-200703-23  View
242543 24587 CVE-2007-1230 URL:http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml  View
242544 24587 CVE-2007-1230 VUPEN:ADV-2007-0756  View
242545 24587 CVE-2007-1230 URL:http://www.vupen.com/english/advisories/2007/0756  View
242546 24587 CVE-2007-1230 OSVDB:34361  View
242547 24587 CVE-2007-1230 URL:http://osvdb.org/34361  View
242548 24587 CVE-2007-1230 SECUNIA:24566  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56500 JVNDB-2007-005192 SQLiteManager におけるディレクトリトラバーサルの脆弱性 SQLiteManager には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-1232 24587 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005192.html  View