CVE-2004-1559
CVE-2004-1559
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.
Affected products
n/a · n/apublic PoCs found — 6
exploitdbwww.exploit-db.com/exploits/24642unverifiedexploitdbwww.exploit-db.com/exploits/24643unverifiedexploitdbwww.exploit-db.com/exploits/24644unverifiedexploitdbwww.exploit-db.com/exploits/24646unverifiedexploitdbwww.exploit-db.com/exploits/24645unverifiedexploitdbwww.exploit-db.com/exploits/24641unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →