CVE-2009-2853

Опубликовано: 18 авг. 2009

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.

Ссылки

http://core.trac.wordpress.org/changeset/11768
Exploit
Vendor Advisory
http://core.trac.wordpress.org/changeset/11769
Exploit
Vendor Advisory
http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/
Patch
Vendor Advisory
http://www.debian.org/security/2009/dsa-1871
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/08/04/5
Mailing List
Third Party Advisory
http://core.trac.wordpress.org/changeset/11768
Exploit
Vendor Advisory
http://core.trac.wordpress.org/changeset/11769
Exploit
Vendor Advisory
http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/
Patch
Vendor Advisory
http://www.debian.org/security/2009/dsa-1871
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/08/04/5
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.71:beta_3:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.72:beta_1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.72:beta_2:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0.1:miles:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.5:ronan:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1:ella:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.1:dangerous:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.7:coltrane:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01352

Низкий

10 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2009-2853

ubuntu

почти 16 лет назад

CVE-2009-2853

debian

почти 16 лет назад

Wordpress before 2.8.3 allows remote attackers to gain privileges via ...

GHSA-gpxx-3842-mjw3

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01352

Низкий

10 Critical

CVSS2

Дефекты

CWE-264