Lucene search

K
patchstackN/APATCHSTACK:29CDFC4B6F2FBF90B19A6DEB5B872934
HistoryJul 01, 2005 - 12:00 a.m.

WordPress <= 1.5.1.2 - Multiple Vulnerabilities #1

2005-07-0100:00:00
N/A
patchstack.com
1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

Because of these vulnerabilities in wp-login.php, the attackers can change the content of the forgotten password e-mail message via the message variable, that is not initialized before use.

Solution

           Update the WordPress to the latest available version (at least 1.5.1.3).
CPENameOperatorVersion
wordpressle1.5.1.2

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

Related for PATCHSTACK:29CDFC4B6F2FBF90B19A6DEB5B872934