CVE

Id
54025  
CVE No.
CVE-2012-0782  
Status
Candidate  
Description
** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance.  
Phase
Assigned (20120118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
568390 54025 CVE-2012-0782 BUGTRAQ:20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress  View
568391 54025 CVE-2012-0782 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html  View
568392 54025 CVE-2012-0782 EXPLOIT-DB:18417  View
568393 54025 CVE-2012-0782 URL:http://www.exploit-db.com/exploits/18417  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23659 JVNDB-2013-005234 Augeas の transfer.c の clone_file 関数における任意のファイルを上書きされる脆弱性 Augeas の transfer.c の clone_file 関数には、copy_if_rename_fails が設定される、および rename 関数により EXDEV または EBUSY が返された場合、任意のファイルを上書きされる、および重要な情報を取得される脆弱性が存在します。 CVE-2012-0787 54025 3.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005234.html  View