[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-2404Date: (C)2012-04-21   (M)2023-12-22


wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECUNIA-48957
SECUNIA-49138
BID-53192
OSVDB-81464
DSA-2470
http://core.trac.wordpress.org/changeset/20486/branches/3.3/wp-comments-post.php
http://wordpress.org/news/2012/04/wordpress-3-3-2/
wordpress-wpcommentspostphp-xss(75202)
wordpress-wpredirect-xss(75092)

CPE    80
cpe:/a:wordpress:wordpress:3.0.6
cpe:/a:wordpress:wordpress:3.0.5
cpe:/a:wordpress:wordpress:3.0.2
cpe:/a:wordpress:wordpress:3.0.1
...
CWE    1
CWE-79
OVAL    4
oval:org.secpod.oval:def:103794
oval:org.secpod.oval:def:103771
oval:org.secpod.oval:def:103772
oval:org.secpod.oval:def:600801
...

© SecPod Technologies