Test Kennung:	1.3.6.1.4.1.25623.1.0.68955
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: wordpress
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: wordpress de-wordpress zh-wordpress-zh_CN zh-wordpress-zh_TW CVE-2010-4257 SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4257 42431 http://secunia.com/advisories/42431 42753 http://secunia.com/advisories/42753 42844 http://secunia.com/advisories/42844 42871 http://secunia.com/advisories/42871 45131 http://www.securityfocus.com/bid/45131 ADV-2010-3337 http://www.vupen.com/english/advisories/2010/3337 ADV-2011-0042 http://www.vupen.com/english/advisories/2011/0042 ADV-2011-0057 http://www.vupen.com/english/advisories/2011/0057 DSA-2138 http://www.debian.org/security/2010/dsa-2138 FEDORA-2010-19290 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052892.html FEDORA-2010-19296 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052879.html FEDORA-2010-19329 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html FEDORA-2010-19330 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/ http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605603 http://codex.wordpress.org/Version_3.0.2 http://core.trac.wordpress.org/changeset/16625 http://wordpress.org/news/2010/11/wordpress-3-0-2/ http://www.xakep.ru/magazine/xa/124/052/1.asp https://bugzilla.redhat.com/show_bug.cgi?id=659265
Copyright	Copyright (C) 2011 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.