CVE-2012-0782 in WordPress
Zusammenfassung (Englisch)
** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
18.01.2012
Veröffentlichung
30.01.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 60054 | WordPress Installation Cross Site Scripting | 79 | Proof-of-Concept | Offizieller Fix | CVE-2012-0782 |