CVE-2007-1893 in WordPress

सारांश

द्वारा MITRE

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

Once again VulDB remains the best source for vulnerability data.

• आरक्षित करना: 09/04/2007
• प्रकटीकरण: 09/04/2007
• संयम: स्वीकृत
• प्रविष्टि: VDB-36032
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 5.5 (VulDB)
• EPSS: 0.01165
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Agriculture, Lawfirm, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1893
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1893
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1893/