garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update CVE-2014-0165 and CVE-2014-0166 (Ref #448)

Browse Source
This commit is contained in:
Peter
2014-04-10 08:40:48 +02:00
parent 7b8dbdedb5
commit 3d8f3df8f1
1 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
data/wp_vulns.xml
View File

@@ -14,18 +14,22 @@
<vulnerability> <vulnerability>
<title>Potential Authentication Cookie Forgery</title> <title>Potential Authentication Cookie Forgery</title>
<references> <references>
<osvdb>105620</osvdb>
<url>https://github.com/WordPress/WordPress/commit/78a915e0e5927cf413aa6c2cef2fca3dc587f8be</url> <url>https://github.com/WordPress/WordPress/commit/78a915e0e5927cf413aa6c2cef2fca3dc587f8be</url>
<cve>2014-0166</cve> <cve>2014-0166</cve>
</references> </references>
<type>AUTHBYPASS</type> <type>AUTHBYPASS</type>
<fixed_in>3.8.2</fixed_in>
</vulnerability> </vulnerability>
<vulnerability> <vulnerability>
<title>Privilege escalation: contributors publishing posts</title> <title>Privilege escalation: contributors publishing posts</title>
<references> <references>
<osvdb>105630</osvdb>
<url>https://github.com/wpscanteam/wpscan/wiki/CVE-2014-0165</url> <url>https://github.com/wpscanteam/wpscan/wiki/CVE-2014-0165</url>
<cve>2014-0165</cve> <cve>2014-0165</cve>
</references> </references>
<type>BYPASS</type> <type>BYPASS</type>
<fixed_in>3.8.2</fixed_in>
</vulnerability> </vulnerability>
</wordpress> </wordpress>
@@ -41,6 +45,26 @@
</wordpress> </wordpress>
<wordpress version="3.7.1"> <wordpress version="3.7.1">
<vulnerability>
<title>Potential Authentication Cookie Forgery</title>
<references>
<osvdb>105620</osvdb>
<url>https://github.com/WordPress/WordPress/commit/78a915e0e5927cf413aa6c2cef2fca3dc587f8be</url>
<cve>2014-0166</cve>
</references>
<type>AUTHBYPASS</type>
<fixed_in>3.7.2</fixed_in>
</vulnerability>
<vulnerability>
<title>Privilege escalation: contributors publishing posts</title>
<references>
<osvdb>105630</osvdb>
<url>https://github.com/wpscanteam/wpscan/wiki/CVE-2014-0165</url>
<cve>2014-0165</cve>
</references>
<type>BYPASS</type>
<fixed_in>3.7.2</fixed_in>
</vulnerability>
<vulnerability> <vulnerability>
<title>wp-admin/options-writing.php Cleartext Admin Credentials Disclosure</title> <title>wp-admin/options-writing.php Cleartext Admin Credentials Disclosure</title>
<references> <references>