Netanel Rubin

The issue allows SQL injection via user preferences.

The issue allows remote attackers to conduct PHP object injection attacks, enabling them to execute arbitrary PHP code. This is achieved by sending crafted serialized shopping cart data.

A cross-site scripting (XSS) issue exists due to the mishandling of unclosed HTML elements during processing of shortcode tags, allowing remote attackers to inject arbitrary web script or HTML.

The issue allows remote authenticated users to bypass intended access restrictions. This can lead to a private post being published and made sticky.

The issue mishandles long e-mail addresses during account registration, allowing remote attackers to obtain default privileges for an arbitrary domain name by placing that name in a substring of an address. This can be demonstrated by the truncation of an @mozilla.com.example.com address to an @mozilla.com address.

The issue allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role. This can be achieved by sending a post-quickdraft-save action to the "wp-admin/post.php" endpoint.

A remote file inclusion issue exists in the `fetchView` function within the `Mage Core Block Template Zend` class, allowing remote administrators to execute arbitrary PHP code. This is achieved via a URL in unspecified vectors involving the `setScriptPath` function. It is unclear whether this issue crosses privilege boundaries, as administrators may already have privileges to include arbitrary files.

The issue allows remote authenticated users to include and execute certain PHP files. This can be achieved via .. (dot dot) sequences in the PATH INFO to index.php or through vectors involving a block value in the ` directive` parameter to the Cms Wysiwyg controller in the Adminhtml module. The issue is related to the `blockDirective` function and the auto loading mechanism.

A SQL injection issue exists in the XML-RPC interface, allowing remote attackers to execute arbitrary SQL commands.