CVE-2008-5278

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

Link	Resource
http://www.securityfocus.com/archive/1/498652	Exploit
http://wordpress.org/development/2008/11/wordpress-265/	Patch Vendor Advisory
http://secunia.com/advisories/32882
http://osvdb.org/50214
http://securityreason.com/securityalert/4662
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00176.html
http://secunia.com/advisories/32966
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00000.html
http://www.securityfocus.com/bid/32476
https://exchange.xforce.ibmcloud.com/vulnerabilities/46882

Configuration 1

cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*

---

Published : 2008-11-28 07:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5278

Mitre link : CVE-2008-5278

No products.

CWE-79