[wp-trac] [WordPress Trac] #11779: ms-edit.php creates garbage data for anything that can potentially contain a slash and is on the whole completely unsanitized (was: SQL injection would be possible in ms-edit.php if it weren't for magic quotes)
WordPress Trac
wp-trac at lists.automattic.com
Wed Jan 6 20:11:54 UTC 2010
#11779: ms-edit.php creates garbage data for anything that can potentially contain
a slash and is on the whole completely unsanitized
-------------------------------+--------------------------------------------
Reporter: Denis-de-Bernardy | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.0
Component: Security | Version: 3.0
Severity: critical | Keywords: multisite
-------------------------------+--------------------------------------------
--
Ticket URL: <http://core.trac.wordpress.org/ticket/11779#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list