Lucene search
+L

6 matches found

OSV
OSV
•added 2008/04/28 8:05 p.m.•13 views

CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

9.5AI score
SaveExploits0References8
NVD
NVD
•added 2008/04/28 8:05 p.m.•43 views

CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

7.5CVSS9.6AI score0.05042EPSS
SaveExploits2References8
Prion
Prion
•added 2008/04/28 8:05 p.m.•38 views

Design/Logic Flaw

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

7.5CVSS6.8AI score0.05042EPSS
SaveExploits3References8Affected Software1
OSV
OSV
•added 2008/04/28 8:05 p.m.•17 views

DEBIAN-CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

7.5CVSS7.1AI score0.05042EPSS
SaveExploits2References1
Debian CVE
Debian CVE
•added 2008/04/28 6:21 p.m.•71 views

CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

7.5CVSS3.3AI score0.05042EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/28 12:00 a.m.•8 views

CVE-2008-1930: Improper Authentication

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

7.5CVSS6AI score0.05042EPSS
SaveExploits2References2
Rows per page
Query Builder