WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
BID:30238
Info
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 30238 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2008 12:00AM |
| Updated: | Jul 16 2008 10:28PM |
| Credit: | These issues were disclosed by the vendor. |
| Vulnerable: |
WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 2.5 WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1 |
| Not Vulnerable: |
WordPress WordPress 2.6 |
Discussion
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Versions prior to WordPress 2.6 are vulnerable.
WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Versions prior to WordPress 2.6 are vulnerable.
Exploit / POC
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URIs are available:
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URIs are available:
Solution / Fix
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
Solution:
Vendor fixes are available. Please see the references for more information.
WordPress WordPress 2.1.3-RC1
WordPress WordPress 2.2
WordPress WordPress 2.5
WordPress WordPress 2.0.10-RC1
WordPress WordPress 2.2 Revision 5003
WordPress WordPress 2.1
WordPress WordPress 2.3
WordPress WordPress 2.0.10-RC2
WordPress WordPress 2.2 Revision 5002
WordPress WordPress 2.1.3-RC2
WordPress WordPress 2.0
WordPress WordPress 2.0.1
WordPress WordPress 2.0.10
WordPress WordPress 2.0.11
WordPress WordPress 2.0.2
WordPress WordPress 2.0.3
WordPress WordPress 2.0.4
WordPress WordPress 2.0.5
WordPress WordPress 2.0.6
WordPress WordPress 2.0.7
WordPress WordPress 2.1.1
WordPress WordPress 2.1.2
WordPress WordPress 2.1.3
WordPress WordPress 2.1.3
WordPress WordPress 2.2.1
WordPress WordPress 2.2.1
WordPress WordPress 2.2.2
WordPress WordPress 2.2.3
WordPress WordPress 2.3.1
WordPress WordPress 2.3.2
WordPress WordPress 2.3.3
WordPress WordPress 2.5.1
Solution:
Vendor fixes are available. Please see the references for more information.
WordPress WordPress 2.1.3-RC1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.5
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.10-RC1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2 Revision 5003
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.10-RC2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2 Revision 5002
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1.3-RC2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.10
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.11
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.4
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.5
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.6
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.7
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1.2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.1.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2.2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.2.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.3.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.3.2
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.3.3
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.5.1
-
WordPress wordpress 2.6
http://wordpress.org/latest.tar.gz
References
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- Ticket #7220 Press This vulnerabilities (WordPress)
- Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)