PT-2004-2467 · WordPress · Wordpress

Thomas Waldegger · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1559

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wordpress version 1.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different PHP files. This includes the redirect to, text, popupurl, or popuptitle parameters to 'wp-login.php', the redirect url parameter to 'admin-header.php', the popuptitle, popupurl, content, or post title parameters to 'bookmarklet.php', the cat ID parameter to 'categories.php', the s parameter to 'edit.php', or the s or mode parameter to 'edit-comments.php'.

Recommendations For Wordpress version 1.2, as a temporary workaround, consider restricting access to the parameters redirect to, text, popupurl, popuptitle, redirect url, popuptitle, popupurl, content, post title, cat ID, s, and mode in their respective PHP files until a patch is available. Avoid using these parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1559

Affected Products

Wordpress

References · 16

• 🔥 http://securityfocus.com/bid/11268 · Exploit
• 🔥 https://exploit-db.com/exploits/24642 · Exploit
• 🔥 https://exploit-db.com/exploits/24645 · Exploit
• 🔥 https://exploit-db.com/exploits/24646 · Exploit
• 🔥 https://exploit-db.com/exploits/24641 · Exploit
• 🔥 http://secunia.com/advisories/12683 · Exploit
• 🔥 https://exploit-db.com/exploits/24643 · Exploit
• 🔥 https://exploit-db.com/exploits/24644 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1559 · Security Note
• https://osv.dev/vulnerability/CVE-2004-1559 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1559 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1559 · Vendor Advisory
• http://securitytracker.com/id?1011440 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1559 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17532 · Note