PublicDate: 2007-02-21 17:28:00 UTC
Candidate: CVE-2007-1049
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1049
Description:
 Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function
 in the nonce AYS functionality (wp-includes/functions.php) for WordPress
 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject
 arbitrary web script or HTML via the file parameter to
 wp-admin/templates.php, and possibly other vectors involving the action
 variable.
Ubuntu-Description:
Notes:
Priority: untriaged
Discovered-by:
Assigned-to:
CVSS:

Bugs:
dapper_wordpress: ignored (reached end-of-life)
edgy_wordpress: needed (reached end-of-life)
feisty_wordpress: not-affected
gutsy_wordpress: not-affected
hardy_wordpress: not-affected
intrepid_wordpress: not-affected
jaunty_wordpress: not-affected
karmic_wordpress: not-affected
devel_wordpress: not-affected
upstream_wordpress: released (2.0.9)