WordPress Administrator Comment Spoofing Vulnerability
BID:41156
Info
WordPress Administrator Comment Spoofing Vulnerability
| Bugtraq ID: | 41156 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 25 2010 12:00AM |
| Updated: | Jun 25 2010 12:00AM |
| Credit: | noukeys |
| Vulnerable: |
WordPress WordPress MU 2.8.1 WordPress WordPress MU 2.7.1 WordPress WordPress MU 1.3.1 WordPress WordPress MU 1.3 WordPress WordPress MU 1.2.3 WordPress WordPress MU 1.2.2 WordPress WordPress MU 2.8 WordPress WordPress MU 2.7 WordPress WordPress MU 2.6 WordPress WordPress 2.9.2 WordPress WordPress 2.9.1 WordPress WordPress 2.8.6 WordPress WordPress 2.8.5 WordPress WordPress 2.8.4 WordPress WordPress 2.8.3 WordPress WordPress 2.8.2 WordPress WordPress 2.8.1 WordPress WordPress 2.6.5 WordPress WordPress 2.6.2 WordPress WordPress 2.6.1 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 1.5.2 WordPress WordPress 1.5.1 .3 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.3.1 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 WordPress WordPress 1.2 WordPress WordPress 0.71 WordPress WordPress 0.7 WordPress WordPress 2.9 WordPress WordPress 2.8 WordPress WordPress 2.6 WordPress WordPress 2.5 WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1 |
| Not Vulnerable: | |
Discussion
WordPress Administrator Comment Spoofing Vulnerability
WordPress is prone to a spoofing vulnerability.
An attacker can exploit this issue to place a comment on a post that appears to come from an administrative user. This can aid attackers in enticing users to perform actions under a false sense of security.
This issue affects unknown versions of WordPress. This BID will be updated when more details become available.
WordPress is prone to a spoofing vulnerability.
An attacker can exploit this issue to place a comment on a post that appears to come from an administrative user. This can aid attackers in enticing users to perform actions under a false sense of security.
This issue affects unknown versions of WordPress. This BID will be updated when more details become available.
Exploit / POC
WordPress Administrator Comment Spoofing Vulnerability
Attackers can use a web browser to exploit this issue.
Attackers can use a web browser to exploit this issue.
Solution / Fix
WordPress Administrator Comment Spoofing Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
WordPress Administrator Comment Spoofing Vulnerability
References:
References: