NVD

Id
49988  
Name
CVE-2009-2762  
Description
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-08-13  
Modified Date
2009-08-15  
Seq
2009-2762  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252966 49988 CVE-2009-2762 20090810 WordPress <= 2.8.3 Remote admin reset password  View
252967 49988 CVE-2009-2762 http://core.trac.wordpress.org/changeset/11798  View
252968 49988 CVE-2009-2762 http://wordpress.org/development/2009/08/2-8-4-security-release/  View
252969 49988 CVE-2009-2762 9410  View
252970 49988 CVE-2009-2762 36014  View
252971 49988 CVE-2009-2762 1022707  View
252972 49988 CVE-2009-2762 wordpress-wplogin-security-bypass(52382)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45204 JVNDB-2009-006211 WordPress の wp-login.php におけるデータベースの最初のユーザパスワードを強制的にリセットされる脆弱性 WordPress の wp-login.php は、データベースの最初のユーザ (管理者など) パスワードを強制的にリセットされる脆弱性が存在します。 CVE-2009-2762 40193 CVE-2009-2762 49988 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006211.html 2009-08-12 2012-12-20 View