WordPress WP_Title Function HTML Injection Vulnerability
BID:22902
Info
WordPress WP_Title Function HTML Injection Vulnerability
| Bugtraq ID: | 22902 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-1894 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2007 12:00AM |
| Updated: | May 02 2007 08:29PM |
| Credit: | g30rg3_x is credited with the discovery of this vulnerability. |
| Vulnerable: |
WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
WordPress WordPress 2.2 Revision 5003 |
Discussion
WordPress WP_Title Function HTML Injection Vulnerability
WordPress is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
WordPress is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
WordPress WP_Title Function HTML Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
WordPress WP_Title Function HTML Injection Vulnerability
Solution:
The vendor has released an update to address this issue for version 2.2 revision 5002. For series 2.1.x and 2.0.x, the vendor will fix this in the next set of 'dot' releases. Please see the references for more information.
WordPress WordPress 2.2 Revision 5002
Solution:
The vendor has released an update to address this issue for version 2.2 revision 5002. For series 2.1.x and 2.0.x, the vendor will fix this in the next set of 'dot' releases. Please see the references for more information.
WordPress WordPress 2.2 Revision 5002
-
WordPress latest.zip
http://wordpress.org/latest.zip
References
WordPress WP_Title Function HTML Injection Vulnerability
References:
References:
- Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)
- WordPress XSS under function wp_title() (g30rg3_x
)