CVE-2011-0701 in WordPress
Summary
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/31/2011
Disclosure
03/14/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56829 | WordPress Uploader information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2011-0701 |