ID de Prueba:	1.3.6.1.4.1.25623.1.0.60164
Categoría:	CGI abuses : XSS
Título:	Wordpress Multiple Cross-Site Scripting Vulnerabilities(2)
Resumen:	NOSUMMARY
Descripción:	Description: The remote version of Wordpress, according to its version number, is vulnerable to multiple cross site scripting vulnerabilities as a result of insufficient sanitization of user supplied data. Attack vecotrs include wp-admin/post.php and wp-admin/page-new.php Versions prior to 2.0.9 are known to be vulnerable. Solution : Upgrade to a later version. Risk factor : Medium CVSS Score: 4.3
Referencia Cruzada:	BugTraq ID: 27123 Common Vulnerability Exposure (CVE) ID: CVE-2008-0192 http://www.securityfocus.com/bid/27123 Bugtraq: 20080103 securityvulns.com russian vulnerabilities digest (Google Search) http://www.securityfocus.com/archive/1/485786/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html http://securityvulns.ru/Sdocument714.html http://websecurity.com.ua/1658/ http://securityreason.com/securityalert/3539 XForce ISS Database: wordpress-popuptitle-xss(39426) https://exchange.xforce.ibmcloud.com/vulnerabilities/39426
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.