Lucene search
HistoryAug 27, 2008 - 3:21 p.m.
CVE-2008-3747
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.006
Percentile
77.8%
The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.
Affected configurations
Node
wordpresswordpressMatch0.6.2
ORwordpresswordpressMatch0.6.2.1
ORwordpresswordpressMatch0.7
ORwordpresswordpressMatch0.71
ORwordpresswordpressMatch0.72
ORwordpresswordpressMatch0.72beta1
ORwordpresswordpressMatch0.72beta2
ORwordpresswordpressMatch0.72rc1
ORwordpresswordpressMatch0.711
ORwordpresswordpressMatch1.0
ORwordpresswordpressMatch1.0.1
ORwordpresswordpressMatch1.2
ORwordpresswordpressMatch1.2beta
ORwordpresswordpressMatch1.2.1
ORwordpresswordpressMatch1.2.2
ORwordpresswordpressMatch1.5
ORwordpresswordpressMatch1.5.1.3
ORwordpresswordpressMatch1.5.2
ORwordpresswordpressMatch2.0
ORwordpresswordpressMatch2.0.1
ORwordpresswordpressMatch2.0.2
ORwordpresswordpressMatch2.0.4
ORwordpresswordpressMatch2.0.5
ORwordpresswordpressMatch2.0.6
ORwordpresswordpressMatch2.0.7
ORwordpresswordpressMatch2.0.9
ORwordpresswordpressMatch2.0.10
ORwordpresswordpressMatch2.0.11
ORwordpresswordpressMatch2.1
ORwordpresswordpressMatch2.1.1
ORwordpresswordpressMatch2.1.2
ORwordpresswordpressMatch2.1.3
ORwordpresswordpressMatch2.2
ORwordpresswordpressMatch2.2.1
ORwordpresswordpressMatch2.2.2
ORwordpresswordpressMatch2.2.3
ORwordpresswordpressMatch2.3
ORwordpresswordpressMatch2.3beta3
ORwordpresswordpressMatch2.3rc1
ORwordpresswordpressMatch2.3.1
ORwordpresswordpressMatch2.3.1rc1
ORwordpresswordpressMatch2.3.2
ORwordpresswordpressMatch2.5
ORwordpresswordpressMatch2.5.1
ORwordpresswordpressMatch2.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wordpress | wordpress | 0.6.2 | cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:* |
| wordpress | wordpress | 0.6.2.1 | cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:* |
| wordpress | wordpress | 0.7 | cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:* |
| wordpress | wordpress | 0.71 | cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:* |
| wordpress | wordpress | 0.72 | cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:* |
| wordpress | wordpress | 0.72 | cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:* |
| wordpress | wordpress | 0.72 | cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:* |
| wordpress | wordpress | 0.72 | cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:* |
| wordpress | wordpress | 0.711 | cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:* |
| wordpress | wordpress | 1.0 | cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:* |
Related
fedora
fedora
[SECURITY] Fedora 8 Update: wordpress-2.6.1-1.fc8
2008-09-10 07:24:48
[SECURITY] Fedora 9 Update: wordpress-2.6.1-1.fc9
2008-09-05 12:22:05
[SECURITY] Fedora 9 Update: wordpress-2.6.1-1.fc9
2008-09-10 06:56:05
openvas
openvas
WordPress <= 2.6.1 Multiple Vulnerabilities
2008-09-25 00:00:00
Fedora Update for wordpress FEDORA-2008-7279
2009-02-17 00:00:00
Fedora Update for wordpress FEDORA-2008-7279
2009-02-17 00:00:00
cve
cve
CVE-2008-3747
2008-08-27 15:21:00
nessus
nessus
Fedora 8 : wordpress-2.6.1-1.fc8 (2008-7463)
2008-09-10 00:00:00
Fedora 9 : wordpress-2.6.1-1.fc9 (2008-7279)
2008-09-08 00:00:00
patchstack
patchstack
WordPress <= 2.6.0 - Multiple vulnerabilities
2008-08-20 00:00:00
debiancve
debiancve
CVE-2008-3747
2008-08-27 15:21:00
cvelist
cvelist
CVE-2008-3747
2008-08-27 15:00:00
prion
prion
Code injection
2008-08-27 15:21:00
redhatcve
redhatcve
CVE-2008-3747
2019-10-04 20:25:44
ubuntucve
ubuntucve
CVE-2008-3747
2008-08-27 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.006
Percentile
77.8%
Related for NVD:CVE-2008-3747