CVE-2007-0109

wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks...

CVE-2007-0109

wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks...

CVE-2007-0109

The CVE-2007-0109 entry concerns WordPress prior to or including 2.0.5, where wp-login.php reveals different error messages depending on whether a user exists. This information disclosure facilitates brute-force attempts and can aid attackers in guessing valid usernames. Additionally, a related G...