Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/08/2007 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress prior to 2.1.3 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpressclassic 1.5

Debian Bug report logs - #504771 wordpress can be subject of delayed attacks via cookies Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Raphael Geissert <atomo64@gmailcom> Date: Fri, 7 Nov 2008 02:42:04 UTC S ...

NVD-CWE-Other http://securityvulns.ru/Rdocument751.html http://websecurity.com.ua/1234/http://osvdb.org/38450 http://www.securityfocus.com/archive/1/477253/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504771 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4483

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect