Lucene search
GoogleOSV:CVE-2017-14990HistoryOct 03, 2017 - 1:29 a.m.
CVE-2017-14990
2017-10-0301:29:03
Google
osv.dev
3
WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability).
Related
packetstorm
packetstorm
WordPress 4.8.2 Activation Key Failed Expiry
2017-10-06 00:00:00
debian
debian
[SECURITY] [DLA 1151-2] wordpress regression update
2017-11-12 22:15:49
[SECURITY] [DLA 1151-1] wordpress security update
2017-10-31 15:22:01
[SECURITY] [DSA 3997-1] wordpress security update
2017-10-11 11:51:21
veracode
veracode
Privilege Escalation
2017-10-04 01:52:50
cvelist
cvelist
CVE-2017-14990
2017-10-02 17:00:00
nvd
nvd
CVE-2017-14990
2017-10-03 01:29:03
cve
cve
CVE-2017-14990
2017-10-03 01:29:03
nessus
nessus
Debian DLA-1151-2 : wordpress regression update
2017-11-01 00:00:00
Debian DSA-3997-1 : wordpress - security update
2017-10-12 00:00:00
zdt
zdt
WordPress 4.8.2 Activation Key Failed Expiry Vulnerability
2017-10-08 00:00:00
prion
prion
Sql injection
2017-10-03 01:29:00
debiancve
debiancve
CVE-2017-14990
2017-10-03 01:29:03
ubuntucve
ubuntucve
CVE-2017-14990
2017-10-03 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1151-1)
2018-02-06 00:00:00
Debian: Security Advisory (DSA-3997-1)
2017-10-09 00:00:00
osv
osv
wordpress - security update
2017-10-10 00:00:00