Description

WordPress is prone to a vulnerability that allows an attacker to gain unauthorized access to the affected application. An attacker can exploit this issue to gain administrative access to the application, which can result in total compromise of the affected application. WordPress versions prior to 2.5.1 are vulnerable.

Remediation

Update to WordPress version 2.5.1 or latest

References

http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-integrity.txt

http://www.securityfocus.com/archive/1/491356

http://core.trac.wordpress.org/ticket/5367

http://secunia.com/advisories/29965/

Related Vulnerabilities

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-29213)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8569)

MediaWiki Improper Input Validation Vulnerability (CVE-2013-1816)

WebLogic CVE-2020-2828 Vulnerability (CVE-2020-2828)

phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-4006)

Severity

High

Classification

CVE-2008-1930 CWE-287 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update