CVE

Id
47120  
CVE No.
CVE-2010-4536  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515344 47120 CVE-2010-4536 MLIST:[oss-security] 20101230 CVE request: wordpress before 3.0.4 XSS  View
515345 47120 CVE-2010-4536 URL:http://www.openwall.com/lists/oss-security/2010/12/30/1  View
515346 47120 CVE-2010-4536 CONFIRM:http://core.trac.wordpress.org/changeset/17172/branches/3.0  View
515347 47120 CVE-2010-4536 CONFIRM:http://wordpress.org/news/2010/12/3-0-4-update/  View
515348 47120 CVE-2010-4536 FEDORA:FEDORA-2011-0306  View
515349 47120 CVE-2010-4536 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053293.html  View
515350 47120 CVE-2010-4536 FEDORA:FEDORA-2011-0315  View
515351 47120 CVE-2010-4536 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053289.html  View
515352 47120 CVE-2010-4536 BID:45620  View
515353 47120 CVE-2010-4536 URL:http://www.securityfocus.com/bid/45620  View
515354 47120 CVE-2010-4536 SECUNIA:42755  View
515355 47120 CVE-2010-4536 URL:http://secunia.com/advisories/42755  View
515356 47120 CVE-2010-4536 SECUNIA:43000  View
515357 47120 CVE-2010-4536 URL:http://secunia.com/advisories/43000  View
515358 47120 CVE-2010-4536 VUPEN:ADV-2010-3335  View
515359 47120 CVE-2010-4536 URL:http://www.vupen.com/english/advisories/2010/3335  View
515360 47120 CVE-2010-4536 VUPEN:ADV-2011-0167  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31454 JVNDB-2011-001694 GIMP の "LIGHTING EFFECTS > LIGHT" プラグインにおけるスタックベースのバッファオーバーフローの脆弱性 GIMP の "LIGHTING EFFECTS > LIGHT" プラグインの plug-ins/lighting/lighting-ui.c 内にある load_preset_response 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4540 47120 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001694.html  View