NVD

Id
7742  
Name
CVE-2011-0701  
Description
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-03-14  
Modified Date
2011-04-20  
Seq
2011-0701  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43918 7742 CVE-2011-0701 http://codex.wordpress.org/Version_3.0.5  View
43919 7742 CVE-2011-0701 http://core.trac.wordpress.org/changeset/17393  View
43920 7742 CVE-2011-0701 FEDORA-2011-3408  View
43921 7742 CVE-2011-0701 FEDORA-2011-3738  View
43922 7742 CVE-2011-0701 FEDORA-2011-3746  View
43923 7742 CVE-2011-0701 [oss-security] 20110209 CVE request: wordpress before 3.0.5  View
43924 7742 CVE-2011-0701 [oss-security] 20110209 Re: CVE request: wordpress before 3.0.5  View
43925 7742 CVE-2011-0701 DSA-2190  View
43926 7742 CVE-2011-0701 46249  View
43927 7742 CVE-2011-0701 ADV-2011-0658  View
43928 7742 CVE-2011-0701 ADV-2011-0721  View
43929 7742 CVE-2011-0701 http://www.wordpress.org/news/2011/02/wordpress-3-0-5/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33971 JVNDB-2011-004213 WordPress の wp-admin/async-upload.php における投稿の下書きを読まれる脆弱性 WordPress の media updater の wp-admin/async-upload.php には、下書きおよびプライベートの投稿を読まれる脆弱性が存在します。 CVE-2011-0701 48608 CVE-2011-0701 7742 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004213.html 2011-02-07 2012-03-27 View