garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added WP 3.8.1 vulns. See #448

Browse Source
This commit is contained in:
ethicalhack3r
2014-04-09 16:30:20 +02:00
parent bfe3285375
commit 9a2141025a
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
data/wp_vulns.xml
View File

@@ -3,6 +3,24 @@
<vulnerabilities xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="vuln.xsd">
<wordpress version="3.8.1">
<vulnerability>
<title>Administrator-exploitable blind SQLi in WordPress 3.8.1</title>
<references>
<url>https://security.dxw.com/advisories/sqli-in-wordpress-3-6-1/</url>
</references>
<type>SQLI</type>
</vulnerability>
<vulnerability>
<title>Potential Authentication Cookie Forgery</title>
<references>
<url>https://github.com/WordPress/WordPress/commit/78a915e0e5927cf413aa6c2cef2fca3dc587f8be</url>
<cve>CVE-2014-0166</cve>
</references>
<type>AUTHBYPASS</type>
</vulnerability>
</wordpress>
<wordpress version="3.8">
<vulnerability>
<title>wp-admin/options-writing.php Cleartext Admin Credentials Disclosure</title>