[wp-trac] [WordPress Trac] #11779: ms-edit.php creates garbage data for anything that can potentially contain a slash and is on the whole completely unsanitized (was: SQL injection would be possible in ms-edit.php if it weren't for magic quotes)

WordPress Trac wp-trac at lists.automattic.com
Wed Jan 6 20:11:54 UTC 2010


#11779: ms-edit.php creates garbage data for anything that can potentially contain
a slash and is on the whole completely unsanitized
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan     
     Type:  defect (bug)       |      Status:  new      
 Priority:  normal             |   Milestone:  3.0      
Component:  Security           |     Version:  3.0      
 Severity:  critical           |    Keywords:  multisite
-------------------------------+--------------------------------------------

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11779#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list