Re: Wordpress 1.2.2 is still vulnerable

From: Thomas Waldegger (bugtraq_at_morph3us.org)
Date: 12/21/04

  • Next message: Devin Ganger: "RE: DJB's students release 44 *nix software vulnerability advisories" 
    Date: 21 Dec 2004 21:56:51 -0000
To: bugtraq@securityfocus.com
    ('binary' encoding is not supported, stored as-is) In-Reply-To: <20041216062119.9218.qmail@www.securityfocus.com>

    Sry, but it's getting ridiculous.
    The new releases of wordpress - 1.2.2 stable and
    1.3-alpha-5 unstable - are still vulnerable for
    some bugs I mentioned in my last message.

    XSS:
    /wp-login.php?action=login&redirect_to=[XSS]
    /wp-admin/templates.php?file=[XSS]
    /wp-admin/post.php?content=[XSS]

    SQL Errors:
    /index.php?m=bla
    /wp-admin/edit.php?m=bla

    PHP-Warnings:
    /wp.php?author=bla
    /wp-commentsrss2.php?p=999999
    /wp-admin/options.php?option_group_id=1888
    /wp-admin/post.php?action=edit&post=2890000000000

  • Next message: Devin Ganger: "RE: DJB's students release 44 *nix software vulnerability advisories"