Lucene search

K
cvelistMitreCVELIST:CVE-2010-5293
HistoryJan 21, 2014 - 1:00 a.m.

CVE-2010-5293

2014-01-2101:00:00
mitre
www.cve.org
3
wordpress
comment.php
cve-2010-5293

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

61.0%

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

61.0%