ISOMAN

CVE

CVE-2007-1049

Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable.

Severity
MEDIUM
CVSS
4.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Gentoo2026.05.31 amd64 minimal installunknownsource
Gentoo2026.05.10 amd64 liveguiunknownsource
Gentoo2026.06.07 arm64 minimal installunknownsource
Gentoo2026.05.05 x86 minimal installunknownsource
Gentoo2026.06.11 powerpc minimal installunknownsource
Gentoo2026.06.11 powerpc minimal-dist installunknownsource
Gentoo2026.05.27 ppc64le minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal-dist installunknownsource
Gentoo2026.06.13 sparc64 minimal installunknownsource
Gentoo2026.06.13 sparc64 minimal-dist installunknownsource
Gentoo2026.06.14 arm64 minimal installunknownsource
Gentoo2026.06.16 x86 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal-dist installunknownsource
Gentoo2026.06.21 arm64 minimal installunknownsource
Gentoo2026.06.23 x86 minimal installunknownsource
Gentoo2026.06.25 powerpc minimal installunknownsource
Gentoo2026.06.25 powerpc minimal-dist installunknownsource
Gentoo2026.07.05 amd64 minimal installunknownsource
Gentoo2026.07.05 arm64 minimal installunknownsource
Gentoo2026.07.07 x86 minimal installunknownsource
Gentoo2026.07.09 powerpc minimal installunknownsource
Gentoo2026.07.09 powerpc minimal-dist installunknownsource
Gentoo2026.07.08 sparc64 minimal installunknownsource
Gentoo2026.07.08 sparc64 minimal-dist installunknownsource
Gentoo2026.07.12 amd64 minimal installunknownsource
Gentoo2026.07.12 amd64 liveguiunknownsource
Gentoo2026.07.12 arm64 minimal installunknownsource
Gentoo2026.07.14 x86 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal-dist installunknownsource
Gentoo2026.07.16 powerpc minimal installunknownsource
Gentoo2026.07.16 powerpc minimal-dist installunknownsource
Gentoo2026.07.19 arm64 minimal installunknownsource
Gentoo2026.07.21 x86 minimal installunknownsource
Gentoo2026.07.23 powerpc minimal installunknownsource
Gentoo2026.07.23 powerpc minimal-dist installunknownsource
Gentoo2026.07.22 sparc64 minimal installunknownsource
Gentoo2026.07.22 sparc64 minimal-dist installunknownsource
Gentoo2026.07.26 arm64 minimal installunknownsource
Gentoo2026.07.28 x86 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal-dist installunknownsource
Gentoo2026.07.30 powerpc minimal installunknownsource
Gentoo2026.07.30 powerpc minimal-dist installunknownsource
Gentoo2026.08.02 arm64 minimal installunknownsource
Gentoo2026.08.04 x86 minimal installunknownsource
Gentoo2026.08.06 powerpc minimal installunknownsource
Gentoo2026.08.06 powerpc minimal-dist installunknownsource
Gentoo2026.08.09 arm64 minimal installunknownsource
Gentoo2026.08.11 amd64 minimal installunknownsource
Gentoo2026.08.11 amd64 liveguiunknownsource
Gentoo2026.08.11 x86 minimal installunknownsource
Gentoo2026.08.13 powerpc minimal installunknownsource
Gentoo2026.08.13 powerpc minimal-dist installunknownsource
Gentoo2026.08.05 sparc64 minimal installunknownsource
Gentoo2026.08.05 sparc64 minimal-dist installunknownsource
Gentoo2026.08.16 amd64 minimal installunknownsource
Gentoo2026.08.16 arm64 minimal installunknownsource
Gentoo2026.08.18 x86 minimal installunknownsource
Gentoo2026.08.20 powerpc minimal installunknownsource
Gentoo2026.08.20 powerpc minimal-dist installunknownsource
Gentoo2026.08.19 sparc64 minimal installunknownsource
Gentoo2026.08.19 sparc64 minimal-dist installunknownsource
Gentoo2026.08.23 amd64 minimal installunknownsource
Gentoo2026.08.23 amd64 liveguiunknownsource
Gentoo2026.08.23 arm64 minimal installunknownsource
Gentoo2026.08.25 x86 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal-dist installunknownsource
Gentoo2026.08.27 powerpc minimal installunknownsource
Gentoo2026.08.27 powerpc minimal-dist installunknownsource
Gentoo2026.08.30 amd64 minimal installunknownsource
Gentoo2026.08.30 amd64 liveguiunknownsource
Gentoo2026.08.30 arm64 minimal installunknownsource
Gentoo2026.08.30 x86 minimal installunknownsource
Gentoo2026.09.01 x86 minimal installunknownsource
Gentoo2026.09.03 powerpc minimal installunknownsource
Gentoo2026.09.03 powerpc minimal-dist installunknownsource
Gentoo2026.09.06 amd64 minimal installunknownsource
Gentoo2026.09.06 arm64 minimal installunknownsource
Gentoo2026.09.06 amd64 liveguiunknownsource
Gentoo2026.09.08 x86 minimal installunknownsource

References

  1. http://downloads.securityfocus.com/vulnerabilities/exploits/22534.html
  2. http://osvdb.org/33766
  3. http://secunia.com/advisories/24306
  4. http://secunia.com/advisories/24566
  5. http://trac.wordpress.org/changeset/4876
  6. http://trac.wordpress.org/changeset/4877
  7. http://trac.wordpress.org/ticket/3781
  8. http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml
  9. http://www.securityfocus.com/bid/22534
  10. http://www.vupen.com/english/advisories/2007/0741
  11. http://downloads.securityfocus.com/vulnerabilities/exploits/22534.html
  12. http://osvdb.org/33766
  13. http://secunia.com/advisories/24306
  14. http://secunia.com/advisories/24566
  15. http://trac.wordpress.org/changeset/4876
  16. http://trac.wordpress.org/changeset/4877
  17. http://trac.wordpress.org/ticket/3781
  18. http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml
  19. http://www.securityfocus.com/bid/22534
  20. http://www.vupen.com/english/advisories/2007/0741