NVD

Id
50075  
Name
CVE-2009-2853  
Description
Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2009-08-26  
Seq
2009-2853  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253394 50075 CVE-2009-2853 http://core.trac.wordpress.org/changeset/11768  View
253395 50075 CVE-2009-2853 http://core.trac.wordpress.org/changeset/11769  View
253396 50075 CVE-2009-2853 http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/  View
253397 50075 CVE-2009-2853 DSA-1871  View
253398 50075 CVE-2009-2853 [oss-security] 20090804 CVE request: Wordpress  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45219 JVNDB-2009-006226 Wordpress における権限を取得される脆弱性 Wordpress には、権限を取得される脆弱性が存在します。 CVE-2009-2853 40284 CVE-2009-2853 50075 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006226.html 2009-08-03 2012-12-20 View