CVE

Id
9987  
CVE No.
CVE-2004-1559  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68381 9987 CVE-2004-1559 BUGTRAQ:20040927 Multiple XSS Vulnerabilities in Wordpress 1.2  View
68382 9987 CVE-2004-1559 URL:http://marc.info/?l=bugtraq&m=109641484723194&w=2  View
68383 9987 CVE-2004-1559 BID:11268  View
68384 9987 CVE-2004-1559 URL:http://www.securityfocus.com/bid/11268  View
68385 9987 CVE-2004-1559 SECTRACK:1011440  View
68386 9987 CVE-2004-1559 URL:http://securitytracker.com/id?1011440  View
68387 9987 CVE-2004-1559 SECUNIA:12683  View
68388 9987 CVE-2004-1559 URL:http://secunia.com/advisories/12683  View
68389 9987 CVE-2004-1559 XF:wordpress-multiple-scripts-xss(17532)  View

Related JVN