Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-0782
4.3
MEDIUMCVSS v2
Published
January 30, 2012
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance
WordPress/WordPress
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.= 3.0.5, = 2.0.11, = 2.8.6, = 2.0, = 2.1.1, = 2.2.3, = 2.0.2, = 2.1, = 2.0.6, = 3.0.2, = 3.0.1, = 3.0, = 1.2.1, = 3.1.4, = 2.8.4, = 2.0.4, = 2.0.1, = 0.711, = 0.71, = 0.7, = 3.2.1, = 2.7.1, = 2.2, = 2.1.2, = 2.0.7, = 2.8, = 2.1.3, = 2.9.2, = 2.6.3, = 2.6.2, = 2.6.1, = 2.0.10, = 2.0.9, = 1.2.2, = 1.2, = 3.1.3, = 3.1.2, = 3.1.1, = 2.8.3, = 2.8.1, = 2.2.2, = 2.2.1, = 2.0.3, <= 3.3.1, = 3.1, = 2.9.1, = 2.6.5, = 2.5.1, = 2.3.3, = 2.3.1, = 2.0.5, = 1.0.2, = 1.0, = 3.3, = 3.0.6, = 3.0.4, = 2.9, = 2.7, = 2.5, = 1.5.2, = 1.5.1.2, = 1.0.1, = 0.72, = 3.0.3, = 2.6, = 1.5, = 2.8.2, = 2.3, = 1.5.1.3, = 1.5.1, = 2.8.5, = 2.3.2, = 2.0.8NVD
wordpress
RubyGemsThe Wordpress gem provides posting to a Wordpress.com blog or a self hosted wordpress by providing your username, password, login url(if you host your blog) and your blog content. With this gem, you have access to add a text entry on Wordpress blog by providing these options: title text, body text, and a tag array. You must include at least title text or body text with your post.
Posting images with posts, posting only images and pulling down your posts will be available very soon.
RubyGemsThe Wordpress gem provides posting to a Wordpress.com blog or a self hosted wordpress by providing your username, password, login url(if you host your blog) and your blog content. With this gem, you have access to add a text entry on Wordpress blog by providing these options: title text, body text, and a tag array. You must include at least title text or body text with your post.
Posting images with posts, posting only images and pulling down your posts will be available very soon.