Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-2612
HistoryAug 17, 2005 - 12:00 a.m.

CVE-2005-2612

2005-08-1700:00:00
ubuntu.com
ubuntu.com
8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.082

Percentile

94.5%

Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows
remote attackers to execute arbitrary PHP code via the
cache_lastpostdate[server] cookie.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchwordpress< 2.0.2-2UNKNOWN
ubuntu6.10noarchwordpress< 2.0.2-2UNKNOWN
ubuntu7.04noarchwordpress< 2.0.2-2UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.082

Percentile

94.5%