Description
wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.
Remediation
References
Related Vulnerabilities
MediaWiki Other Vulnerability (CVE-2005-1245)
Ruby on Rails Improper Input Validation Vulnerability (CVE-2014-0082)
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-7913)
Oracle Database Server CVE-2010-4420 Vulnerability (CVE-2010-4420)
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-27184)