PT-2014-2999 · Automattic+1 · Wordpress+1

Publicado 2014-05-08 · Atualizado 2014-05-09 · CVE-2013-5916

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bradesco Gateway plugin version 2.0 for Wordpress

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploited via the QUERY STRING.

Recommendations For Bradesco Gateway plugin version 2.0, update the plugin to a version that fixes this issue, or consider disabling the falha.php file as a temporary workaround to prevent exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-5916

Produtos afetados

Bradesco Gateway Plugin

Wordpress

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-09/0112.html · Exploit
• 🔥 http://securityfocus.com/bid/62617 · Exploit
• http://osvdb.org/97624 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5916 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5916 · Nota