Oval Definition:oval:org.cisecurity:def:31
Revision Date:2016-02-08Version:2
Title:DSA-3250-1 -- wordpress -- security update
Description:Multiple security issues have been discovered in Wordpress, a weblog manager, that could allow remote attackers to upload files with invalid or unsafe names, mount social engineering attacks or compromise a site via cross-site scripting, and inject SQL commands.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2015-3438
CVE-2015-3439
CVE-2015-3440
DSA-3250-1
Platform(s):Debian 8
Debian GNU/kFreeBSD 7.0
Debian GNU/Linux 7.0
Product(s):wordpress
Definition Synopsis
  • Debian 7
  • Debian 7 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND wordpress is earlier than 0:3.6.1+dfsg-1~deb7u6
  • OR Debian 8
  • Debian 8 is installed
  • AND wordpress is earlier than 0:4.1+dfsg-1+deb8u1
  • BACK