Lucene search

MitreCVE-2007-4139

HistoryAug 03, 2007 - 10:17 a.m.

CVE-2007-4139

2007-08-0310:17:00

CWE-79

mitre

web.nvd.nist.gov

cve-2007-4139

xss

security

wordpress

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.

Affected configurations

Nvd

Node

wordpresswordpressMatch2.2.1

VendorProductVersionCPE
wordpresswordpress2.2.1cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	2.2.1	cpe:2.3:a:wordpress:wordpress:2.2.1:::::::*

References

mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/

osvdb.org/36621

secunia.com/advisories/26296

trac.wordpress.org/attachment/ticket/4689/4689.diff

trac.wordpress.org/ticket/4689

www.securityfocus.com/bid/25158

www.vupen.com/english/advisories/2007/2744

exchange.xforce.ibmcloud.com/vulnerabilities/35718

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

Related for CVE-2007-4139