Show filters
53 Total Results
Displaying 51-53 of 53
Sort by:
Attacker Value
Unknown
CVE-2005-2107
Disclosure Date: July 05, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.
0
Attacker Value
Unknown
CVE-2005-2108
Disclosure Date: July 05, 2005 (last updated February 22, 2025)
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
0
Attacker Value
Unknown
CVE-2005-2109
Disclosure Date: July 05, 2005 (last updated February 22, 2025)
wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.
0
