EDB-18417
functionalWordPress Core 3.3.1 - Multiple Vulnerabilities
view exploit source exploit_dbverifiedtype webappsauthor Trustwave's SpiderLabspublished 2012-01-25catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-0937US | medium5.0 | Exploit | ||
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which all… | ||||
| CVE-2012-0782US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbit… | ||||
| CVE-2011-4899US | high7.5 | Exploit | ||
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote… | ||||
| CVE-2011-4898US | medium5.0 | Exploit | ||
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on wheth… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan