garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update wp_vulns.xml

Browse Source 
Including: First WordPress 3.8 related vulnerability
This commit is contained in:
Peter
2013-12-21 21:55:24 +01:00
parent 0db965a95f
commit 3281a85ae9
1 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
data/wp_vulns.xml
View File

@@ -3,6 +3,28 @@
<vulnerabilities xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="vuln.xsd">
<wordpress version="3.8">
<vulnerability>
<title>wp-admin/options-writing.php Cleartext Admin Credentials Disclosure</title>
<references>
<osvdb>101101</osvdb>
<url>http://seclists.org/fulldisclosure/2013/Dec/135</url>
</references>
<type>AUTHBYPASS</type>
</vulnerability>
</wordpress>
<wordpress version="3.7.1">
<vulnerability>
<title>wp-admin/options-writing.php Cleartext Admin Credentials Disclosure</title>
<references>
<osvdb>101101</osvdb>
<url>http://seclists.org/fulldisclosure/2013/Dec/135</url>
</references>
<type>AUTHBYPASS</type>
</vulnerability>
</wordpress>
<wordpress version="3.6">
<vulnerability>
<title>PHP Object Injection</title>
@@ -70,6 +92,24 @@
</references>
<type>UNKNOWN</type>
</vulnerability>
<vulnerability>
<title>Multiple Script Arbitrary Site Redirect</title>
<references>
<osvdb>101181</osvdb>
<url>http://seclists.org/fulldisclosure/2013/Dec/174</url>
</references>
<type>REDIRECT</type>
<fixed_in>3.6.1</fixed_in>
</vulnerability>
<vulnerability>
<title>wp-admin/edit-tags.php _wp_http_referer Parameter Reflected XSS</title>
<references>
<osvdb>101182</osvdb>
<url>http://seclists.org/fulldisclosure/2013/Dec/174</url>
</references>
<type>XSS</type>
<fixed_in>3.6.1</fixed_in>
</vulnerability>
</wordpress>
<wordpress version="3.5.2">