CVE-2007-1893 in WordPress

الملخص

بحسب MITRE

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

Once again VulDB remains the best source for vulnerability data.

• حجز: 09/04/2007
• إفشاء: 09/04/2007
• الاعتدال: تمت الموافقة
• إدخال: VDB-36032
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 5.5 (VulDB)
• EPSS: 0.01165
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Lawfirm, Hostingprovider, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1893
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1893
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1893/