Lucene search
HistoryApr 28, 2009 - 4:30 p.m.
CVE-2008-6762
cve-2008-6762
open redirect
vulnerability
wordpress
phishing
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.6%
Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.
Affected configurations
Node
wordpresswordpressMatch2.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress:wordpress | wordpress | eq | 2.6 |
Related
patchstack
patchstack
WordPress <= 2.6.9 - Open Redirection
2009-04-28 00:00:00
nvd
nvd
CVE-2008-6762
2009-04-28 16:30:03
prion
prion
Open redirect
2009-04-28 16:30:00
cvelist
cvelist
CVE-2008-6762
2009-04-28 16:00:00
debiancve
debiancve
CVE-2008-6762
2009-04-28 16:30:03
ubuntucve
ubuntucve
CVE-2008-6762
2009-04-28 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities
2009-05-11 00:00:00
Debian Security Advisory DSA 1871-1 (wordpress)
2009-09-02 00:00:00
Debian: Security Advisory (DSA-1871-1)
2009-09-02 00:00:00
debian
debian
[SECURITY] [DSA 1871-2] New wordpress packages fix regression
2009-08-27 01:39:01
[SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
2009-08-23 03:41:14
osv
osv
wordpress - several vulnerabilities
2009-08-23 00:00:00
wordpress - regression fix
2009-08-23 00:00:00
nessus
nessus
Debian DSA-1871-1 : wordpress - several vulnerabilities
2010-02-24 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.6%
Related for CVE-2008-6762