AOH :: Web :: Blogs :: C07-2541.HTM

AOH :: Web :: Blogs :: C07-2541.HTM
Wordpress <= v2.1.0

Wordpress <= v2.1.0 Wordpress <= v2.1.0


If you're logged in into wordpress as an admin, your comments aren't properly sanitized, thus allowing an XSS to be posted. This can be exploited using XSRF techniques.

More info & PoC: http://www.virtuax.be/advisories/Advisory4-20022007.txt

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better). Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.