CVE-2011-0701 in WordPress
Résumé (Anglaise)
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
31/01/2011
Divulgation
14/03/2011
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 56829 | WordPress Uploader divulgation d'information | 200 | Preuve de concept | Correctif officiel | CVE-2011-0701 |