Beveiligingsadvies

CVE-2008-0508

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-01-31 19:30:00

Laatst bijgewerkt 2024-08-07 07:46:54

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.

← Alle CVE's bekijken Bekijk op cve.org ↗