CVE-2009-2762
HIGH
7.5
CVSS 2.0
Description
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.
Affected WordPress components
-
WordPress coreUp to and including 2.8.3
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 2.8.3
References
- archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html Broken Link
- core.trac.wordpress.org http://core.trac.wordpress.org/changeset/11798 Vendor Advisory
- secunia.com http://secunia.com/advisories/36237 Third Party Advisory
- wordpress.org http://wordpress.org/development/2009/08/2-8-4-security-release/ Patch, Vendor Advisory
- www.exploit-db.com http://www.exploit-db.com/exploits/9410 Exploit, Third Party Advisory
- www.securityfocus.com http://www.securityfocus.com/bid/36014 Third Party Advisory, VDB Entry
- www.securitytracker.com http://www.securitytracker.com/id?1022707 Third Party Advisory, VDB Entry
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/52382 Third Party Advisory, VDB Entry
- nvd.nist.gov Official NVD record