WordPress多个跨站脚本攻击漏洞

漏洞信息详情

WordPress多个跨站脚本攻击漏洞

• CNNVD编号：CNNVD-200603-297
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2006-1263
  
• 漏洞类型：
  
  
  跨站脚本
  
• 发布时间：
  
  2006-03-18
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-04-26
  
• 厂        商：
  
  wordpress
• 漏洞来源：
  WordPress

WordPress 2.0.2之前版本中存在多个\”未通知\”跨站脚本攻击(XSS)漏洞，远程攻击者可以通过未知攻击向量注入任意Web脚本或HTML。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

WordPress WordPress (B2) 0.6.2 .1

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress (B2) 0.6.2

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 0.7

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 0.71

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.2

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.2.1

ordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.2.2

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.5

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.5.1

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.5.1 .3

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.5.1 .2

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 1.5.2

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 2.0

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

WordPress WordPress 2.0.1

WordPress WordPress Latest Release Download

http://wordpress.org/latest.tar.gz

来源: BID

名称: 17069

链接:http://www.securityfocus.com/bid/17069

来源: wordpress.org

链接:http://wordpress.org/development/2006/03/security-202/