CVE

Id
54180  
CVE No.
CVE-2012-0937  
Status
Candidate  
Description
** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time.  
Phase
Assigned (20120130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
569739 54180 CVE-2012-0937 BUGTRAQ:20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress  View
569740 54180 CVE-2012-0937 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html  View
569741 54180 CVE-2012-0937 EXPLOIT-DB:18417  View
569742 54180 CVE-2012-0937 URL:http://www.exploit-db.com/exploits/18417  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26371 JVNDB-2012-002078 RealNetworks Helix Server および Helix Mobile Server の rn5auth.dll におけるバッファオーバーフローの脆弱性 RealNetworks Helix Server および Helix Mobile Server の rn5auth.dll には、バッファオーバーフローの脆弱性が存在します。 CVE-2012-0942 54180 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002078.html  View