Lucene search

K
patchstackN/APATCHSTACK:9DB349E80687C2AC6DD7DCEB4E9ADF9F
HistoryAug 18, 2009 - 12:00 a.m.

WordPress <= 2.8.2 - Multiple Vulnerabilities #2

2009-08-1800:00:00
N/A
patchstack.com
6

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Because of these vulnerabilities, the attackers can gain privileges via a direct request to edit-link-category-form.php, admin-footer.php, edit-page-form.php, edit-category-form.php or edit-form-comment.php.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle2.8.2

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Related for PATCHSTACK:9DB349E80687C2AC6DD7DCEB4E9ADF9F