 |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.801807 |
| Categoría: | Web application abuses |
| Título: | WordPress < 3.0.4 KSES Library XSS Vulnerability - Active Check |
| Resumen: | WordPress is prone to a cross-site scripting (XSS); vulnerability. |
| Descripción: | Summary: WordPress is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by input validation errors in the 'KSES HTML/XHTML' filter (wp-includes/kses.php) when processing user-supplied data, which could be exploited by attackers to execute arbitrary script code on the user's browser session in the security context of an affected site. Vulnerability Impact: Successful exploitation will allow attacker to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site when the malicious data is being viewed. Affected Software/OS: WordPress versions prior to 3.0.4. Solution: Update to WordPress version 3.0.4 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N |
| Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2010-4536 42755 http://secunia.com/advisories/42755 43000 http://secunia.com/advisories/43000 45620 http://www.securityfocus.com/bid/45620 ADV-2010-3335 http://www.vupen.com/english/advisories/2010/3335 ADV-2011-0167 http://www.vupen.com/english/advisories/2011/0167 FEDORA-2011-0306 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053293.html FEDORA-2011-0315 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053289.html [oss-security] 20101230 CVE request: wordpress before 3.0.4 XSS http://www.openwall.com/lists/oss-security/2010/12/30/1 http://core.trac.wordpress.org/changeset/17172/branches/3.0 http://wordpress.org/news/2010/12/3-0-4-update/ |
| Copyright | Copyright (C) 2011 Greenbone AG |
| Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |