CVE

Id
43266  
CVE No.
CVE-2010-0682  
Status
Candidate  
Description
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.  
Phase
Assigned (20100222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471396 43266 CVE-2010-0682 MISC:http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/  View
471397 43266 CVE-2010-0682 MISC:http://tmacuk.co.uk/?p=180  View
471398 43266 CVE-2010-0682 CONFIRM:http://wordpress.org/development/2010/02/wordpress-2-9-2/  View
471399 43266 CVE-2010-0682 CONFIRM:https://core.trac.wordpress.org/ticket/11236  View
471400 43266 CVE-2010-0682 FEDORA:FEDORA-2010-19329  View
471401 43266 CVE-2010-0682 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html  View
471402 43266 CVE-2010-0682 FEDORA:FEDORA-2010-19330  View
471403 43266 CVE-2010-0682 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html  View
471404 43266 CVE-2010-0682 OSVDB:62330  View
471405 43266 CVE-2010-0682 URL:http://www.osvdb.org/62330  View
471406 43266 CVE-2010-0682 SECUNIA:38592  View
471407 43266 CVE-2010-0682 URL:http://secunia.com/advisories/38592  View
471408 43266 CVE-2010-0682 SECUNIA:42871  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35526 JVNDB-2010-001306 複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性 複数の VMware 製品の WebAccess には、プロキシサーバの機能性を利用した、リクエストの発信元を偽装される脆弱性が存在します。 CVE-2010-0686 43266 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001306.html  View