CVE

Id
39866  
CVE No.
CVE-2009-2431  
Status
Candidate  
Description
WordPress 2.7.1 places the username of a post"s author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.  
Phase
Assigned (20090710)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
437945 39866 CVE-2009-2431 BUGTRAQ:20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information  View
437946 39866 CVE-2009-2431 URL:http://www.securityfocus.com/archive/1/archive/1/504795/100/0/threaded  View
437947 39866 CVE-2009-2431 MISC:http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked  View
437948 39866 CVE-2009-2431 OSVDB:55716  View
437949 39866 CVE-2009-2431 URL:http://www.osvdb.org/55716  View
437950 39866 CVE-2009-2431 SECTRACK:1022528  View
437951 39866 CVE-2009-2431 URL:http://securitytracker.com/id?1022528  View
437952 39866 CVE-2009-2431 VUPEN:ADV-2009-1833  View
437953 39866 CVE-2009-2431 URL:http://www.vupen.com/english/advisories/2009/1833  View
437954 39866 CVE-2009-2431 XF:wordpress-username-information-disclosure(51733)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43810 JVNDB-2009-004817 IBM Lotus Instant Messaging および Web Conferencing における有効なユーザ名を列挙される脆弱性 IBM Lotus Instant Messaging および Web Conferencing の Sametime サーバは、ログイン失敗時にユーザアカウントが存在するか否かにより、異なる遅延時間でエラーメッセージを生成するため、有効なユーザ名を列挙される脆弱性が存在します。 CVE-2009-2435 39866 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004817.html  View