[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

95906

 
 

909

 
 

77986

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-0508

Date: (C)2008-01-31   (M)2017-08-08
 
CVSS Score: 6.8Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.

Reference:
http://www.securityfocus.com/archive/1/archive/1/486840/100/0/threaded
SECUNIA-28593
SREASON-3595
ADV-2008-0281
http://g30rg3x.com/wp-files/dpm_11gx.zip
http://g30rg3x.com/xsrf-bajo-deans-permalinks-migration-10
http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt
permalinks-deanpmconfig-csrf(39845)

CWE    1
CWE-352

© 2013 SecPod Technologies