CVE

Id
25089  
CVE No.
CVE-2007-1732  
Status
Candidate  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: another researcher disputes this issue, stating that this is legitimate functionality for administrators. However, it has been patched by at least one vendor.  
Phase
Assigned (20070328)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249664 25089 CVE-2007-1732 BUGTRAQ:20070306 Re: Wordpress <= v2.1.0  View
249665 25089 CVE-2007-1732 URL:http://marc.info/?l=bugtraq&m=117319839710382&w=2  View
249666 25089 CVE-2007-1732 MISC:http://codex.wordpress.org/Roles_and_Capabilities  View
249667 25089 CVE-2007-1732 GENTOO:GLSA-200703-23  View
249668 25089 CVE-2007-1732 URL:http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml  View
249669 25089 CVE-2007-1732 OSVDB:33884  View
249670 25089 CVE-2007-1732 URL:http://osvdb.org/33884  View
249671 25089 CVE-2007-1732 SECUNIA:24430  View
249672 25089 CVE-2007-1732 URL:http://secunia.com/advisories/24430  View
249673 25089 CVE-2007-1732 SECUNIA:24566  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54911 JVNDB-2007-003603 Linux kernel の net/dccp/proto.c におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の net/dccp/proto.c の do_dccp_getsockopt 関数の DCCP support は、optlen の値の上限を検証しないため、カーネルメモリを読まれる、またはサービス運用妨害 (oops) 状態となる脆弱性が存在します。 CVE-2007-1734 25089 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003603.html  View